engsuite-apptrexo[.]wixstudio[.]com

PhishDestroy identifies the domain engsuite-apptrexo.wixstudio.com as a recently activated crypto drainer posing as a legitimate application portal, currently under investigation for active credential theft and wallet-draining operations. This WixStudio-hosted site leverages a generic cryptocurrency-themed interface to deceive users into connecting wallets or submitting private keys under the guise of an official app suite. No specific drainer kit fingerprint (e.g., MetaMask sniffer, WalletConnect exploit) has been publicly documented at this stage, but behavior aligns with known modus operandi of crypto drainers using spoofed portals to harvest private keys or transaction approvals. The infrastructure suggests opportunistic deployment rather than a high-profile brand impersonation.

This domain resolves to IP 34.144.206.118 via Let’s Encrypt SSL (valid certificate) and is registered on the WixStudio subdomain platform. VirusTotal currently reports 0 security vendors detecting the site out of 95 engines, indicating low static detection but high operational risk due to active behavior. Creation date and exact registrar details are obscured via Wix’s managed hosting structure, which is common in fraudulent site deployments to reduce traceability. Google Safe Browsing (GSB) does not currently list the domain, and it remains absent from major threat intelligence blocklists as of the latest sync. These attributes suggest a newly launched, minimally fingerprinted operation with rapid deployment tactics.

As of now, the domain is still active and serving a spoofed application interface. Given the lack of AV detection and absence from GSB, users interacting with this site are at immediate risk of wallet compromise if they connect a cryptocurrency wallet or enter recovery phrases. PhishDestroy recommends immediate blocking at the network and endpoint level using the IP and domain. End users are advised to avoid visiting the site, verify any app portal via official sources, and revoke any unintended wallet approvals immediately. The overall risk level remains high due to active deployment and cryptocurrency targeting, despite low detection scores.