newrabbyapps[.]wixstudio[.]com

On 24 July 2026, the domain newrabbyapps.wixstudio.com was observed hosting a generic phishing campaign. The domain is registered through Wix.com Ltd., a widely used website builder platform, and currently resolves to the IP address 162.159.143.12. Infrastructure analysis shows the domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy service, indicating that at least one reputable anti‑phishing vendor has identified malicious activity associated with this host. The authoritative nameserver information could not be retrieved (NS_NOT_FOUND), which may reflect a DNS configuration issue or intentional concealment of the hosting environment.

No additional public intelligence such as Safe Browsing entries, OTX references, SSL certificate details, or HTTP response codes is available for this domain at this time. Consequently, the full scope of the phishing operation, including targeted brands, victim demographics, or the presence of credential‑stealing pages, remains uncertain. Defenders are advised to proactively block traffic to newrabbyapps.wixstudio.com at network perimeters and endpoint filters, monitor DNS queries for the associated IP address, and consider adding the domain to internal threat intelligence feeds.

Continuous observation of the Wix.com hosting environment is recommended, as the platform can be leveraged to rapidly spin up new malicious sites. Organizations should also verify that any legitimate Wix‑based services used internally are not inadvertently affected by blanket blocks, employing domain‑specific allow‑lists where appropriate. Ongoing collection of additional indicators, such as page titles, SSL fingerprints, or malware payload hashes, will improve detection accuracy as the campaign evolves.