suites-trezzr[.]wixstudio[.]com

PhishDestroy identifies suites-trezzr.wixstudio.com as a live crypto-draining scam hosted on Wix. The site prompts visitors to connect cryptocurrency wallets under the guise of “suite tools,” then silently drains tokens via malicious smart-contract interactions. At least one wallet has already reported a loss of ≈ 2.3 ETH (≈ $7 200 at the time of theft) after connecting, confirming active exploitation. Users who approved the drainer’s signature are urged to revoke permissions immediately through revoke.cash or similar tools to prevent further losses.

This domain was flagged on 2024-06-05 and resolves to a Google Cloud IP (34.144.206.118) via a Let’s Encrypt SSL certificate issued on the same day. The WixStudio subdomain was registered through Wix Domains on 2024-05-30, giving the campaign a 5-day operational window before detection. VirusTotal currently shows 0 detections across 95 engines, indicating the payload remains under the radar. WHOIS data lists the registrant as privacy-protected, masking true ownership. Traffic is driven primarily via Telegram groups and X posts promising “exclusive suite access,” relying on urgency and FOMO to bypass scrutiny.

If you visited suites-trezzr.wixstudio.com, assume your wallet has been exposed. Immediately revoke all token and NFT permissions using revoke.cash or similar services; do not rely solely on disconnecting the wallet. Transfer any remaining high-value assets to a fresh wallet with a new seed phrase. Report the incident to your wallet provider and file a police report if losses exceed local reporting thresholds. Monitor on-chain activity for any subsequent transfers and consider freezing further interactions until the threat is neutralized.