appssuites[.]wixstudio[.]com

PhishDestroy has identified appssuites.wixstudio.com as a live phishing domain impersonating Microsoft 365 login pages to harvest corporate credentials. This domain is hosted on Wix’s Studio platform and currently serves a spoofed Office 365 login interface designed to trick employees into submitting their corporate email passwords. The landing page closely mimics Microsoft’s official authentication flow, including branded imagery and realistic input fields, making it difficult for untrained users to distinguish from legitimate portals. Threat actors commonly leverage free website builders like Wix to rapidly deploy phishing pages that evade initial detection by security filters. This domain poses an active threat with 4 out of 95 VirusTotal detections as of analysis time, indicating it remains undetected by most antivirus engines. The domain resolves to IP address 34.144.206.118, which is associated with cloud hosting infrastructure, and uses a valid Let’s Encrypt SSL certificate to establish false trust. The unique seed identifier 217eb7 confirms this entry is part of the PhishDestroy verified threat database. The domain is currently active and under investigation, suggesting ongoing abuse by attackers. If you have visited appssuites.wixstudio.com and entered any login credentials, immediately change your Microsoft 365 password using a known-safe device and enable multi-factor authentication (MFA). Review recent sign-in logs in the Microsoft 365 admin portal for unauthorized access and revoke any suspicious sessions. Report the domain to your IT security team and consider running a full malware scan on the device used. Avoid interacting with this domain further. Users should remain cautious of unexpected login prompts, especially those delivered via email or embedded links, and verify URLs carefully before entering credentials.