engapp-suites[.]wixstudio[.]com

engapp-suites.wixstudio.com is a currently active credential harvesting domain impersonating 'EngApp Suites'. As of investigation seed 743811, this domain is categorized under generic_phishing and remains under active scrutiny due to its involvement in deceiving users into submitting login credentials. The campaign status is marked as active, indicating ongoing exploitation by threat actors to harvest sensitive information.

This domain resolves to IP 34.144.206.118 and is hosted on the WixStudio platform, utilizing a Let's Encrypt SSL certificate to appear legitimate. According to VirusTotal data, it has received 0 detections out of 95 vendors, suggesting it has yet to be widely blacklisted or flagged by mainstream security solutions. The domain's infrastructure details, including hosting provider and SSL certification, are leveraged to enhance its credibility and evade initial detection mechanisms.

Users are strongly advised to avoid interacting with engapp-suites.wixstudio.com or submitting any credentials to pages hosted on this domain. Immediate actions include blocking the domain at the network level and reporting it to relevant threat intelligence platforms. Organizations should update firewall and endpoint protection rules to include this domain and IP address. If accidental exposure occurs, users must reset passwords immediately and enable multi-factor authentication on all associated accounts.