official-suites-apps[.]wixstudio[.]com

PhishDestroy identifies official-suites-apps.wixstudio.com as an active crypto drainer posing as legitimate Suite applications. This domain leverages a compromised Wix Studio subdomain to host fraudulent login pages, tricking users into connecting their cryptocurrency wallets under the guise of app authentication. The infrastructure relies on a Let's Encrypt SSL certificate—often abused in phishing campaigns—and resolves to a Google Cloud IP (34.144.206.118), evading traditional detection due to its legitimate hosting provider footprint. The domain exhibits multiple red flags: despite zero detections on VirusTotal (4/95 engines), it remains unresolved by public blocklists, indicating a fresh or stealthily operated campaign. Created recently, this domain has already drawn attention for its malicious activity, though its short lifespan may explain the lack of widespread blocking. The absence of flags on reputable threat intelligence platforms underscores the need for proactive verification. If you interacted with this domain—especially entering credentials or wallet connections—disconnect your wallet immediately using tools like WalletConnect’s disconnect function. Revoke any unauthorized token approvals via blockchain explorers (e.g., Etherscan) and scan your device with PhishDestroy’s browser extension or Malwarebytes for residual payloads. Report the domain to your cybersecurity team or PhishDestroy’s threat feed to aid in blocking efforts. Exercise extreme caution with Wix-hosted subdomains until their legitimacy is confirmed.