prefix-suiteapp[.]wixstudio[.]com

PhishDestroy identifies prefix-suiteapp.wixstudio.com as an active credential-harvesting page disguised as a SuiteApp login portal. The site is currently under investigation for hosting a convincing replica aimed at tricking visitors into entering usernames and passwords under the guise of a business software update. All evidence points to a targeted phishing campaign rather than broad spam, indicating attackers may be harvesting corporate access for follow-on attacks like email takeover or data theft. This domain was flagged after resolving to 34.144.206.118 and receiving a Let’s Encrypt SSL certificate. VirusTotal scanning returned zero detections from 95 engines as of the latest scan, meaning antivirus and browser filters have not yet blacklisted the page. The domain is hosted on Wix’s Studio platform, which is frequently abused for rapid deployment of spoofed login forms. While the exact creation date and registrar details were not provided in the seed data, the combination of a fresh SSL certificate and zero detections suggests the page is newly operational and actively evading detection. If you visited prefix-suiteapp.wixstudio.com and entered any login details, assume your credentials have been compromised. Immediately change the password on that service and enable multi-factor authentication. Scan your device with updated antivirus software and review account activity for signs of unauthorized access. Report the page to your organization’s security team and consider revoking any session tokens or API keys linked to the exposed account. Do not re-enter credentials on this domain; it is not the legitimate application suite login page.