suiteapp-trezer[.]wixstudio[.]com

PhishDestroy identifies suiteapp-trezer.wixstudio.com as an active phishing domain impersonating a legitimate app login page to harvest user credentials. This domain employs a generic phishing lure, exploiting trust in recognizable platforms like Wix to deceive victims into entering sensitive information. While no specific brand or drainer kit has been attributed yet, the presence of a Let's Encrypt SSL certificate suggests an attempt to appear legitimate, potentially mimicking a login portal for a productivity suite or application. The domain’s structure—suiteapp-trezer—hints at a spoofed app integration, a common tactic in credential phishing campaigns.

This domain resolves to IP 34.144.206.118 and currently shows 0 detections on VirusTotal out of 95 engines, indicating it remains under the radar of many security tools. The registrar is Wix.com, leveraging their subdomain service (wixstudio.com) to host the phishing page. The domain’s creation date is under investigation, but its active status suggests recent deployment. Google Safe Browsing (GSB) has not yet flagged the domain, and the current blocklist count is zero, highlighting the need for proactive monitoring. These technical indicators point to a newly deployed phishing operation still evading widespread detection.

Currently, suiteapp-trezer.wixstudio.com remains active, with no takedown actions observed. Users interacting with this domain risk credential theft or malware installation, depending on the phishing payload. Immediate response actions include blocking the domain and IP at the network level, while security researchers should analyze the page’s backend to identify potential drainer kits or C2 infrastructure. The remaining risk is high due to the domain’s low detection rate and active status. Users are advised to avoid clicking links to this domain and report any encounters to their security teams. Organizations should deploy browser-based defenses and user awareness training to mitigate exposure to this campaign.