us-en-appsuites[.]wixstudio[.]com

Analysis of us-en-appsuites.wixstudio.com indicates a confirmed phishing infrastructure targeting application suite credentials, currently active as of July 24, 2026. The domain is hosted on Wix's platform, resolving to IP address 162.159.143.12, which is part of Cloudflare's network (AS13335). Infrastructure review reveals the domain lacks configured nameservers (NS_NOT_FOUND), a technical anomaly that may indicate misconfigured or hastily deployed phishing infrastructure. The domain appears on one security blocklist, specifically PhishDestroy, which has flagged it for malicious activity.

No additional detection vendors or threat intelligence platforms are currently reporting this domain, though this does not preclude active malicious use. The registrar is Wix.com Ltd., a legitimate service provider often exploited for phishing due to its ease of domain creation and hosting capabilities. The domain's current status remains active, suggesting ongoing malicious operations. Defenders should treat this domain as a high-risk credential harvesting site, particularly given its suggestive subdomain naming ('appsuites') and confirmed blocklist presence.

Network-level blocking is recommended, with monitoring for related subdomains under the wixstudio.com parent domain. Further investigation into the hosting IP (162.159.143.12) may reveal additional malicious domains leveraging the same infrastructure. No SSL certificate analysis or page content review has been conducted to confirm the exact phishing kit or targeted brand, though the naming convention strongly implies a focus on application suite credentials.