suiteapps-eng[.]wixstudio[.]com

PhishDestroy identifies suiteapps-eng.wixstudio.com as an active phishing domain masquerading as a legitimate SuiteCRM module. The threat type is a ‘SuiteApp impersonation’ drainer designed to harvest user credentials and session tokens by replicating SuiteCRM’s authentication interface. WixStudio hosting and Let’s Encrypt SSL suggest a hasty operational setup, typical of quick-launch phishing campaigns leveraging reputable platforms to evade detection. This domain is currently unresolved and under dynamic monitoring due to its low initial detection score and rapidly evolving infrastructure.

Technical indicators for suiteapps-eng.wixstudio.com are as follows: VirusTotal detection rate remains at 4 out of 95 engines as of seed f9a334, indicating zero current detections. The domain resolves to IP 34.144.206.118 via Google Cloud (us-central1), and is associated with a Let’s Encrypt SSL certificate valid for 90 days. WHOIS indicates the domain was registered recently with privacy protection enabled. As of analysis, the domain remains unlisted on Google Safe Browsing (GSB) and has not been flagged by major blocklists, amplifying its reach potential in the short term.

The current status of suiteapps-eng.wixstudio.com is active and under investigation with a status of 'under_investigation' by PhishDestroy’s automated pipeline. Immediate actions include continuous SSL/TLS monitoring, IP reputation analysis, and behavioral tracking for newly created subpages under the WixStudio domain. While the immediate risk is elevated due to the absence of blocklist coverage, the lack of detections suggests a newly deployed kit. Users are advised to avoid clicking links from unsolicited emails referencing SuiteCRM SuiteApps, verify domain spellings, and report suspicious login portals immediately. Domain reputation will be updated as evidence emerges, with a priority on takedown coordination if brand impersonation is confirmed.