apps-suitetrezo[.]wixstudio[.]com

PhishDestroy’s forensic analysis has identified apps-suitetrezo.wixstudio.com as an active phishing domain distributing a generic credential-and-crypto-drainer kit. The domain mimics a legitimate productivity suite, likely targeting enterprise users with a spoofed login interface. No specific brand affiliation or drainer kit variant is disclosed in current IOCs, but the site’s structure and payload are consistent with modern web skimming campaigns aimed at harvesting session tokens and wallet credentials.

Technical indicators confirm elevated risk: the domain shows 8/95 detections on VirusTotal, uses a Let’s Encrypt SSL certificate, and is registered under Wix’s WixStudio platform. The domain resolves to IP 34.144.206.118 and has been flagged by two blocklists including OISD and PhishingArmy. Registration details remain obscured due to Wix’s privacy protection, but the site was created recently and has not yet been classified by Google Safe Browsing (GSB status pending).

As of today, apps-suitetrezo.wixstudio.com remains active and poses a sustained risk to potential victims. PhishDestroy recommends immediate network-level blocking via DNS or firewall rules targeting IP 34.144.206.118. Users are urged to avoid the domain entirely, scan local systems for unauthorized wallet extensions or browser extensions, and report any interaction to their security teams. While mitigation efforts are underway, the risk remains elevated due to low vendor coverage and the use of a trusted hosting and SSL provider.