new-rabbyapps[.]wixstudio[.]com

Analysis of the domain new-rabbyapps.wixstudio.com indicates it is currently active and under investigation for generic phishing. The domain is registered through Wix.com Ltd., a popular website‑builder platform, and its authoritative name server information is unavailable (NS_NOT_FOUND). DNS resolution points to the IP address 34.144.206.118, an address associated with Amazon Web Services infrastructure, which is commonly used for legitimate hosting but also frequently leveraged by malicious actors to benefit from reputable cloud provider reputation. The domain has been flagged by the PhishDestroy blocklist and appears on one additional security blocklist, demonstrating that at least two independent threat‑intelligence sources have identified it as malicious. VirusTotal records show the domain was scanned by ninety‑five antivirus engines; none reported a detection, a fact that does not confirm safety but reflects the limitations of signature‑based scanning for phishing content. No public SSL/TLS certificate details, HTTP status codes, or page‑title metadata are available in the supplied intelligence, leaving the content of the landing page unverified. Consequently, the observable evidence consists primarily of registration data, hosting location, and blocklist presence. Defenders should treat the domain as hostile until further forensic analysis clarifies its payload. Recommended mitigations include adding the domain to URL filtering rules, monitoring outbound connections to the associated IP, and employing DNS‑sinkhole techniques to disrupt resolution. Continuous observation of threat‑intel feeds for updated detections or additional blocklist entries is advised, as the current data set does not provide a complete picture of the phishing campaign’s scope or target audience.