appsuittrezr[.]wixstudio[.]com

The domain appsuittrezr.wixstudio.com has been identified as involved in a credential harvesting scam. This specific threat aims to deceive users into submitting sensitive login information under false pretenses. Currently, the status of this domain is under investigation, with active monitoring due to its malicious use. No specific brand impersonation has been confirmed as of this report.

Technical analysis reveals that appsuittrezr.wixstudio.com resolves to the IP address 34.144.206.118 and uses an SSL certificate issued by Let's Encrypt, which is common for legitimate and malicious sites alike. VirusTotal analysis shows 4 out of 95 security vendors flagging this domain, indicating it has not yet been widely detected as malicious by automated systems. The domain is registered through Wix.com, a popular site builder platform. No creation date or blocklist counts are currently available, and trust scores remain unreported, suggesting this campaign is relatively new or under the radar.

Given the domain’s active status and use for credential harvesting, users are advised to exercise caution and avoid submitting any personal or login information on this site. Security teams should monitor the IP 34.144.206.118 and consider proactive blocking or sandbox testing. Immediate steps include updating endpoint protection, educating users about such scams, and reporting any suspicious activity related to this domain. Continued surveillance is recommended until more conclusive threat intelligence is gathered.