suiteapp-trrazor[.]wixstudio[.]com

PhishDestroy identifies suiteapp-trrazor.wixstudio.com as an active crypto drainer impersonation campaign targeting cryptocurrency users. The domain mimics a legitimate Razor suite application interface to deceive victims into connecting their wallets, enabling unauthorized fund transfers. Current status remains active with no detections on major threat intelligence platforms, indicating a potentially emerging or evasive threat. The domain resolves to IP address 34.144.206.118 and utilizes a Let's Encrypt SSL certificate for enhanced legitimacy. It operates under Wix's studio platform with no available registrar or creation date information visible through standard WHOIS queries. VirusTotal analysis shows zero detections across 95 threat intelligence vendors as of current assessment. The absence of historical data and lack of blocklist presence suggests this may represent a newly deployed campaign designed to evade detection through low-profile operation. This domain poses a high risk to cryptocurrency users due to its specific targeting of wallet connections and impersonation of a recognizable DeFi application. Users should immediately block all connections to this domain and associated IP addresses. Never input wallet credentials or connect wallets to suspicious applications. Report the domain to your antivirus provider and relevant threat intelligence platforms. Exercise heightened vigilance when accessing DeFi applications and verify all URLs through official channels before any interaction.