eng-trzersuite[.]wixstudio[.]com

PhishDestroy has identified eng-trzersuite.wixstudio.com as a potential crypto drainer posing as a legitimate suite of trading tools. The domain attempts to mimic professional trading interfaces to trick users into connecting their cryptocurrency wallets under the false promise of advanced features or exclusive access. Once a wallet is linked, attackers can silently drain assets without requiring additional confirmation, leaving victims with irreversible losses. This threat is particularly deceptive because the site leverages WixStudio’s hosting platform, which may lend an air of legitimacy to unsuspecting visitors.

This domain was flagged with 0 detections across 95 VirusTotal engines as of its latest scan, indicating it remains under the radar of most antivirus platforms. The infrastructure is hosted on a Google Cloud IP (34.144.206.118), and the site uses a valid Let's Encrypt SSL certificate to appear secure. Historically, domains hosted on similar IPs have been associated with short-lived phishing campaigns designed to evade detection. While the exact creation date is not specified in available data, the combination of low detection rates and professional hosting suggests this is a newly deployed threat designed for rapid exploitation.

If you visited eng-trzersuite.wixstudio.com and entered any cryptocurrency wallet details, disconnect the wallet from all dApps immediately and revoke any suspicious permissions via your wallet’s security settings. Transfer any remaining funds to a new wallet with a different address, and consider reporting the incident to your wallet provider or relevant blockchain authorities. Do not interact further with this domain, and share this advisory with others who may have encountered it. Stay vigilant for unsolicited links promising trading tools or financial rewards, as these are common lures for crypto drainers.