apps-rabbyweb[.]wixstudio[.]com

The domain apps-rabbyweb.wixstudio.com is currently listed as active in threat intelligence feeds and has been classified as a generic phishing infrastructure. Registration data shows the domain was created through Wix.com Ltd., a popular website‑builder service, which is frequently abused by malicious actors to host fraudulent pages. The domain resolves to the IP address 34.144.206.118, a cloud‑hosted address that does not provide any publicly visible SSL certificate details or HTTP status in the available dataset. Nameserver resolution failed, reported as NS_NOT_FOUND, which may indicate misconfiguration or deliberate concealment of hosting details. Scanning on VirusTotal indicates that the domain was examined by 95 security vendors; at the time of the last scan none reported a detection. The absence of a detection does not constitute evidence of safety, especially given that the domain appears on a single external security blocklist and has been actively blocked by the PhishDestroy sink‑hole service. The blocklist entry confirms that the domain is being used to deliver phishing content, although the specific lure or credential‑stealing page has not been publicly captured. Defenders should treat apps-rabbyweb.wixstudio.com as a malicious indicator. Immediate actions include adding the domain to DNS‑based blocklists, configuring web‑proxy filters to deny HTTP/S traffic to the host, and monitoring outbound connections for the associated IP address. Because the hosting provider is a legitimate SaaS platform, any false‑positive mitigation should be coordinated with Wix.com Ltd. to request takedown of the offending site. Continuous re‑scanning on multi‑vendor platforms is advised, as threat actors may later upload malicious payloads that trigger detections. Until a definitive takedown is confirmed, the domain remains under investigation and should be presumed hostile.