us-metora-apps[.]wixstudio[.]com

The domain us-metora-apps.wixstudio.com was created on December 17, 2016 and is currently listed as active in a generic phishing campaign with an elevated risk rating. VirusTotal has recorded detections from 11 of 91 scanning engines, indicating that a subset of security products identify malicious behavior associated with the host. The domain is blocked by the PhishDestroy feed and appears on one additional security blocklist, reinforcing its classification as hostile. DNS resolution points to the IPv4 address 34.144.206.118, which is the sole A‑record observed.

Registration was performed through the Wix Studio platform, a popular website‑builder service, suggesting the attacker leveraged a legitimate hosting provider to obtain a seemingly benign sub‑domain. No public SSL certificate details, HTTP response codes, or page‑title information have been published in the current intelligence set, leaving the exact content of the site unverified. Likewise, no attribution to a specific brand or phishing kit is available.

Defenders should continue to block the domain at perimeter filters, update local threat‑intel feeds with the observed detection count, and monitor the associated IP address for any new activity. Because the domain resolves to a single IP, any future connections to that address can be safely denied pending further investigation. Ongoing observation of the host and periodic re‑scans with multi‑engine services are recommended to capture any changes in the detection profile.