suiteapp-io[.]wixstudio[.]com

PhishDestroy identifies suiteapp-io.wixstudio.com as an active generic phishing domain currently under investigation for hosting a crypto-draining campaign. The threat involves impersonating a suite application login portal to trick users into connecting wallets or entering credentials that can be drained by malicious scripts. Users who interact with this domain risk irreversible cryptocurrency losses due to unauthorized wallet connections or credential harvesting. This domain resolves to IP address 34.144.206.118 and uses a Let’s Encrypt SSL certificate to appear legitimate. As of the latest intelligence, VirusTotal reports 0 detections out of 95 engines, indicating it remains undetected by most antivirus solutions. The domain is hosted on WixStudio (wixstudio.com), a legitimate website builder, which may be abused for phishing due to its permissive hosting environment. Further analysis of infrastructure and historical records shows no presence on major blocklists (e.g., Google Safe Browsing, PhishTank, OpenPhish) and no recorded takedowns to date. Trust scores across threat intelligence platforms remain neutral, likely contributing to its stealthy operation. Safety recommendations include avoiding any interaction with suiteapp-io.wixstudio.com or downloads from the site. Users who suspect exposure should disconnect wallets immediately, revoke any connected permissions via blockchain explorers or wallet settings, and report the domain to PhishDestroy for verification. Always verify links via official sources before entering credentials or connecting wallets, especially when redirected from unsolicited emails or ads.