suiteapptrexo[.]wixstudio[.]com

PhishDestroy identifies suiteapptrexo.wixstudio.com as an active brand impersonation crypto drainer campaign targeting cryptocurrency users. The site masquerades as a legitimate application suite to deceive visitors into connecting their wallets and authorizing malicious smart contract transactions that drain funds. Security researchers note this domain has not yet been flagged by VirusTotal despite active abuse, indicating a low detection rate that allows the campaign to persist undetected by many security tools. This domain was flagged by PhishingArmy and OISD security blocklists and resolves to IP address 34.144.206.118 with a Let's Encrypt SSL certificate. VirusTotal reports 5 out of 95 detection engines identified this threat at the time of analysis, highlighting the stealth nature of this campaign. The domain uses WixStudio hosting, which has been abused by threat actors to create professional-looking phishing pages that evade traditional email filtering solutions. With no detections yet despite being on two blocklists, this site represents an elevated risk to cryptocurrency holders who may interact with fraudulent application links. Users who visited suiteapptrexo.wixstudio.com should immediately disconnect any cryptocurrency wallets and revoke any unauthorized smart contract permissions through their wallet's security settings. Do not interact with any transaction requests that appear after visiting this site. Report the domain to your antivirus provider and consider running a full malware scan on any device that accessed this URL. Cryptocurrency users should verify application sources through official channels before connecting wallets, and enable hardware wallet verification for all transactions to prevent unauthorized transfers.