suiteapps-trsexzo[.]wixstudio[.]com

PhishDestroy identifies suiteapps-trsexzo.wixstudio.com as an active PayPal brand impersonation phishing domain currently under investigation. The threat involves deceptive tactics designed to mimic legitimate PayPal communications, aiming to harvest user credentials or financial information. The domain remains accessible and operational, with no confirmed takedown or mitigation measures as of the latest assessment. Security researchers are advised to treat this domain as a high-risk threat vector pending further analysis.

This domain was flagged by 5 of 95 VirusTotal vendors, indicating a lack of widespread detection despite its active status. The domain resolves to IP address 34.144.206.118, which is associated with Wix hosting infrastructure. The SSL certificate is issued by Let’s Encrypt, providing a veneer of legitimacy. The domain is registered under Wix.com, with a creation date that aligns with the timeline of recent phishing campaigns. Currently, the domain is not listed on any major threat intelligence blocklists, and its trust scores remain unverified due to the absence of detections. The lack of detection on VirusTotal suggests either a newly deployed threat or a sophisticated evasion technique.

The current status of suiteapps-trsexzo.wixstudio.com remains active, with no confirmed remediation efforts in progress. Given the domain’s association with PayPal impersonation, users are strongly advised to avoid interacting with this domain or any linked content. Security teams should monitor network traffic for connections to IP 34.144.206.118 and inspect SSL certificates issued by Let’s Encrypt for anomalies. Implementing DNS-based blocking for this domain and its subdomains is recommended to mitigate potential exposure. Additionally, users should verify the legitimacy of any PayPal-related communications through official channels and report suspicious activity to PayPal’s dedicated phishing reporting platform. Continuous monitoring and threat intelligence updates are essential to address potential escalation of this campaign.