just-suiteapp[.]wixstudio[.]com

PhishDestroy identifies just-suiteapp.wixstudio.com as an active fake 'Suite App' phishing site designed to steal login credentials. This Wix-hosted page mimics a legitimate software suite portal, tricking users into entering work email and password details under the guise of accessing a 'corporate tool.' The domain uses a Let’s Encrypt SSL certificate to appear secure and resolves to IP 34.144.206.118. Users who click through from spoofed emails or ads may unknowingly expose corporate credentials to attackers, enabling follow-on account takeover or data theft. Avoid entering any sensitive information on this site. This domain was flagged for hosting a targeted credential-harvesting campaign. VirusTotal currently shows 8 out of 95 detection engines flagging the page, indicating it remains under the radar of many security tools. The site is registered through Wix’s infrastructure, which complicates traditional domain-based blocking. The campaign appears to exploit Wix’s free, fast site creation to rapidly stand up new phishing pages that evade early detection. Analysts note a pattern: these fake suite apps often appear in phishing emails claiming 'your organization has upgraded to Suite v2.1 — log in to activate' — a classic lure used to bypass security filters. If you visited just-suiteapp.wixstudio.com, assume your credentials may have been compromised. Immediately change your work email password (and any reused passwords) using a known good device. Enable multi-factor authentication (MFA) on your email and corporate accounts to block unauthorized access. Report the incident to your IT/security team and scan your device for malware. Avoid interacting with this site; Wix has been notified but takedowns can take time. Use tools like browser isolation or corporate DNS filtering to block access proactively.