started-trizoor[.]wixstudio[.]com

PhishDestroy identifies started-trizoor.wixstudio.com as a brand impersonation crypto drainer targeting users through deceptive WixStudio pages. This site lures victims with fake giveaways, airdrops, or impersonated exchanges to trick them into connecting crypto wallets and signing malicious transactions that drain assets directly. The domain resolves to IP 34.144.206.118 and holds a Let’s Encrypt SSL certificate for added legitimacy. VirusTotal currently shows 4/95 security engines detecting the threat, indicating it remains under the radar despite active distribution. Registrar data shows the domain was created recently, and blocklist checks confirm it is not yet widely blacklisted. Users who visited or interacted with started-trizoor.wixstudio.com should immediately revoke any wallet connections made on the site, transfer remaining assets to a clean wallet, and run a malware scan on their device. Disconnect the device from the internet if you suspect wallet compromise and consider using a hardware wallet for future transactions to minimize risk.