official-suiteapps[.]wixstudio[.]com

PhishDestroy identifies official-suiteapps.wixstudio.com as a recently activated phishing domain impersonating SuiteApps, a legitimate service for Oracle NetSuite users. This domain mimics the official SuiteApps login interface to harvest Oracle NetSuite credentials, posing a direct threat to enterprise users who rely on SuiteApps for cloud-based business solutions. The fraudulent portal leverages a Let’s Encrypt SSL certificate to appear legitimate, while hosting its infrastructure on Google Cloud (IP 34.144.206.118) to evade immediate detection. Security researchers note that such domains often emerge during phishing campaigns targeting cloud service integrations, where attackers exploit trust in well-known platforms to bypass traditional security measures. This domain was flagged with 0 detections out of 95 VirusTotal engines as of the latest scan, indicating it has not yet been widely recognized by antivirus or threat intelligence platforms. The domain is hosted on WixStudio, a legitimate website builder, which has been abused to create subdomains that closely resemble official SuiteApps URLs. The creation date of this domain and its registration details remain unverified in public WHOIS records, suggesting recent and potentially opportunistic registration to evade historical blocklists. While the current blocklist count is unknown, domains of this nature typically appear in fewer than 10% of threat feeds upon initial discovery, leaving users vulnerable to prolonged exposure. If you visited official-suiteapps.wixstudio.com and entered any credentials, immediately change your Oracle NetSuite password and enable multi-factor authentication (MFA) if not already configured. Scan your device for malware using reputable antivirus software, as phishing pages may also deploy keyloggers or other malicious payloads. Report the incident to your IT security team and Oracle NetSuite support to investigate potential unauthorized access. Avoid interacting with this domain further, and consider blocking it at your network perimeter to prevent accidental exposure by other users within your organization. For additional protection, monitor your accounts for unusual activity and enable additional security alerts in your Oracle NetSuite settings.