apps-blofen[.]wixstudio[.]com

Analysis of the domain apps-blofen.wixstudio.com indicates it is an active generic phishing site hosted on Wix Studio infrastructure. The domain was registered on December 17, 2016, through Wix Studio, a legitimate website builder platform often exploited for phishing due to its ease of use and free hosting options. As of July 29, 2026, the domain is flagged by 11 of 91 security vendors on VirusTotal, suggesting detection by multiple engines but not yet widespread consensus. It appears on at least one security blocklist and is specifically blocked by PhishDestroy, further corroborating its malicious classification.

No specific brand impersonation or targeted scam type is confirmed in the available data, and the exact content of the site remains unanalyzed. The domain does not appear to use a known phishing kit or exhibit overtly suspicious SSL/TLS configurations, as it leverages Wix Studio's default certificates. Infrastructure analysis reveals no anomalous hosting patterns; the domain resolves to Wix's standard content delivery network, which is consistent with legitimate Wix-hosted sites. This alignment with benign infrastructure may contribute to delayed or partial detection by security vendors.

Defenders should treat this domain as an elevated-risk credential harvesting endpoint. Recommended actions include blocking the domain at the DNS or proxy level, monitoring for connections to it within enterprise networks, and submitting additional samples to threat intelligence platforms to improve detection coverage. Given the domain's age and hosting provider, it may persist unless reported to Wix for takedown or flagged by additional security vendors. No evidence suggests this domain is part of a larger campaign, but its continued activity warrants ongoing scrutiny.