apps-mexxapps[.]wixstudio[.]com

Analysis of apps-mexxapps.wixstudio.com indicates that the domain is actively serving a generic phishing campaign. The domain resolves to the IPv4 address 34.144.206.118, which is hosted by the Wix.com Ltd. infrastructure. Registration data shows that Wix.com Ltd. acted as the registrar, a common pattern for abuse actors leveraging free‑site builders to obtain quickly deployed domains. The domain appears on one public security blocklist and has been flagged by the PhishDestroy sink‑hole service, confirming that it is currently recognized as malicious by at least one independent threat‑intelligence feed. The DNS configuration returned “NS_NOT_FOUND”, suggesting that authoritative name server information could not be retrieved at the time of analysis, which may indicate a temporary DNS misconfiguration or intentional concealment. VirusTotal has processed 95 vendor submissions for the host and did not return any positive classifications; however, the absence of detections does not constitute evidence of legitimacy, especially given the corroborating blocklist and sink‑hole entries. No additional intelligence such as Safe Browsing, OTX, or SSL certificate details is available, and no page title or brand targeting information has been disclosed. The domain remains active as of the report date, July 20, 2026. Defenders should consider adding the IP address 34.144.206.118 to network‑level deny lists, enforce URL filtering for the fully qualified domain name, and monitor for any traffic to the host. Because the registrar is a widely used service, threat‑intel teams may wish to query Wix.com’s abuse‑reporting channels for further context and request takedown if appropriate. Continuous observation is advised to detect any shifts in hosting or additional malicious payloads that may be deployed behind the same infrastructure.