supportrabby[.]wixstudio[.]com

PhishDestroy identifies supportrabby.wixstudio.com as an active fraudulent support page impersonating a legitimate customer service portal (supportrabby), leveraging WixStudio hosting for rapid deployment. The page is part of a credential phishing kit designed to harvest user credentials by mimicking official support interfaces, a common tactic in consumer-grade social engineering campaigns. No known affiliation with the targeted brand (Rabby) was established during infrastructure review, indicating a blatant impersonation strategy intended for mass exploitation.

This fraudulent domain resolves to IP 34.144.206.118 and hosts a fresh deployment, currently exhibiting a VirusTotal detection rate of 6/95 scanners as of seed 02ac01. The domain is registered through Wix.com, created recently with a Let's Encrypt SSL certificate. Google Safe Browsing (GSB) has not yet flagged the site, but PhishDestroy confirms the domain appears on 2 active blocklists including SEAL and MetaMask security filters. Despite zero AV detections, behavioral anomalies such as domain age and SSL issuance date disparity raise suspicion levels.

supportrabby.wixstudio.com remains active with an 'under_investigation' status. Immediate risk is medium due to zero detections and active evasion tactics, though protective blocks are in place from major security vendors. Users are advised to avoid interaction and report any engagement. Remaining risk includes potential delayed detection and expansion into new blocklists. PhishDestroy recommends blacklisting by domain, IP, and SSL hash, and monitoring for derivative domains using seed 02ac01.