strt-trezrcdn[.]wixstudio[.]com

The domain strt-trezrcdn.wixstudio.com is currently flagged as an active crypto drainer, a specialized phishing threat designed to extract cryptocurrency wallet credentials and execute unauthorized fund transfers. Infrastructure analysis confirms the domain remains operational, with no takedown requests or suspension notices observed as of the latest verification. Technical indicators reveal the domain has evaded detection by security vendors, with 0 of 95 VirusTotal engines flagging it as malicious. The domain resolves to IP address 34.144.206.118, hosted under a Let's Encrypt SSL certificate, which provides HTTPS encryption but does not validate legitimacy. No historical blocklist entries or trust score deviations were identified in public threat feeds. The domain leverages Wix Studio's subdomain infrastructure, a common tactic to exploit legitimate hosting services for phishing campaigns. Current risk assessment categorizes this threat as under active investigation due to its operational status and targeted financial impact. Organizations and individuals are advised to block the domain and IP at the network perimeter, revoke any associated SSL certificates, and monitor wallet addresses linked to the site. Users who interacted with the domain should assume credential compromise, immediately transfer remaining funds to a new wallet, and audit transaction histories for unauthorized activity. Security teams should prioritize monitoring for similar subdomain patterns under Wix Studio or other platform-as-a-service providers.