appsuitt[.]wixstudio[.]com

PhishDestroy has identified appsuitt.wixstudio.com as an active crypto-draining phishing site designed to steal cryptocurrency from unsuspecting victims. This domain, hosted on WixStudio's infrastructure at IP 34.144.206.118, impersonates legitimate crypto-related services to trick users into connecting their digital wallets or entering sensitive credentials. The threat actor behind this campaign employs convincing landing pages that prompt users to link their wallet extensions (such as MetaMask) or provide seed phrases, only to drain funds directly from connected accounts. Given the lack of detections on VirusTotal (4/95 engines) and the domain's active status, users should exercise extreme caution when encountering links or advertisements associated with this site. This domain was flagged after confirming it resolves to IP 34.144.206.118 and utilizes a valid Let's Encrypt SSL certificate to appear trustworthy. VirusTotal currently shows zero detections, indicating it has evaded most antivirus and security tools. The domain is hosted on WixStudio's platform, which has been abused by threat actors to host phishing content due to its ease of use and fast deployment capabilities. Registrar details and creation date are still under investigation, but the combination of a free hosting service, valid certificate, and active phishing page suggests a well-coordinated campaign targeting cryptocurrency users. The threat actor's infrastructure appears to be freshly provisioned, likely to avoid detection and takedown efforts. If you have visited appsuitt.wixstudio.com or entered any information on the site, act immediately to secure your accounts. Disconnect your cryptocurrency wallets from any suspicious dApps or websites, and revoke any unintended permissions granted to untrusted applications. Scan your device for malware using reputable security software, as crypto-draining phishing sites often deploy additional payloads to steal credentials or install backdoors. Report the domain to PhishDestroy for verification and take steps to monitor your wallet transactions for unauthorized activity. Always verify the legitimacy of crypto-related websites by cross-referencing official sources and using tools like PhishDestroy to validate domains before interacting with them.