learnsuiteio[.]wixstudio[.]com

PhishDestroy identifies learnsuiteio.wixstudio.com as an active brand impersonation phishing domain impersonating the legitimate LearnSuite platform. The threat is currently under investigation with a risk level classified as active. This domain leverages a deceptive naming convention to exploit user trust in the legitimate LearnSuite service, a widely recognized educational platform.

This domain was flagged with 0 detections out of 95 VirusTotal vendors, indicating a low current detection rate despite its malicious intent. The domain resolves to IP address 34.144.206.118, which is hosted on the WixStudio platform. The SSL certificate is issued by Let's Encrypt, a common practice among both legitimate and malicious domains. No blocklist entries or trust score data are available at this time, suggesting this is a newly deployed or recently modified threat actor infrastructure. The low detection rate highlights the evasive nature of this campaign, posing a significant risk to potential victims.

Given the active status and low detection rate, users are strongly advised to avoid interacting with any communications or links associated with learnsuiteio.wixstudio.com. Organizations should implement network-level blocking for the IP address 34.144.206.118 and monitor for any further domain registrations mimicking LearnSuite. Users who may have engaged with this domain should immediately review their credentials for compromise and enable multi-factor authentication where applicable. Security teams are advised to update threat intelligence feeds with this indicator to enhance proactive detection. Continuous monitoring is recommended as this threat evolves.