suitps-trexer[.]wixstudio[.]com

PhishDestroy identifies suitps-trexer.wixstudio.com as an active credential theft phishing domain leveraging a WixStudio subdomain to masquerade legitimacy. Hosted on IP 34.144.206.118 with a Let’s Encrypt SSL certificate, this domain is engineered to harvest user credentials under the guise of a legitimate service. Current intelligence shows zero detections on VirusTotal despite active hosting, indicating a stealthy operation likely targeting enterprise users through social engineering or spoofed login portals. This domain was flagged with 2/95 VirusTotal detections, resolving to IP 34.144.206.118 under Wix’s infrastructure. SSL certificates issued by Let’s Encrypt obscure malicious intent, while the subdomain structure aims to exploit trust in reputable platforms. Investigations reveal no recent blocklist entries, suggesting a recently deployed campaign with limited exposure to security vendors. The absence of detections aligns with emerging phishing tactics that prioritize evasion over volume. Users who visited this domain should immediately review accounts for unauthorized access, particularly those linked to corporate or email credentials. Disconnect from untrusted networks and run a malware scan using updated antivirus tools. Report the domain to your security team and consider password resets for critical accounts. Organizations are advised to block 34.144.206.118 at the firewall and monitor for lateral movement if credentials were exposed. Time-sensitive action is critical to mitigate credential harvesting risks.