trzsuites[.]wixstudio[.]com

PhishDestroy identifies trzsuites.wixstudio.com as an active phishing page designed to mimic Trader Joe’s and trick visitors into connecting crypto wallets, where a drainer script silently transfers tokens to attacker-controlled addresses. The page masquerades as the legitimate Trader Joe’s platform in order to harvest credentials and seed phrases while siphoning assets in real time. Observed traffic is automatically redirected to wallet-connect prompts that execute malicious JavaScript payloads upon user approval.

This domain was flagged by PhishDestroy with an elevated risk rating and is currently resolving to IP 34.144.206.118, served over a Let’s Encrypt certificate. VirusTotal analysis confirms 4 out of 95 participating security vendors already flag the domain, and it appears on 1 public blocklist maintained by PhishingArmy. While the domain uses the WixStudio platform, its naming convention and impersonation tactics align with recent crypto-drainer campaigns targeting DeFi users. The page content and on-chain transaction patterns suggest a high-fidelity replica intended to evade casual scrutiny.

If you visited trzsuites.wixstudio.com or entered any information—especially wallet addresses or recovery phrases—immediately disconnect your wallet, revoke any unauthorized token approvals via tools like Revoke.cash, and transfer remaining assets to a fresh wallet. Run a full antivirus scan and rotate all passwords tied to the exposed data. Use PhishDestroy’s real-time verification tool to confirm the legitimacy of any future Trader Joe’s-related links before interacting.