rabyweb-home[.]wixstudio[.]com

Rabyweb-home.wixstudio.com is currently listed as an active generic phishing infrastructure with an elevated risk rating. The domain was created on 17 December 2016 and was provisioned through the Wix Studio website‑builder service, a known avenue for abuse because it supplies free TLS certificates and rapid deployment. Independent analysis by PhishDestroy has placed the domain on its blocklist, and it also appears on one additional public security blocklist, indicating that at least two distinct detection sources have observed malicious activity associated with the host. VirusTotal scans show that four of ninety‑one antivirus or URL‑reputation engines flagged the domain, confirming that some security products recognize it as suspicious.

The limited detection count suggests that the site may employ techniques to evade broad‑scale detection, such as using clean hosting or infrequently changing content. No public information is available regarding the underlying IP address, autonomous system, geographic location, SSL certificate details, HTTP response codes, or page title, so the full technical footprint remains partially unknown. Defenders should add rabyweb-home.wixstudio.com to domain‑based deny lists across email gateways, web proxies, and endpoint protection solutions. Continuous monitoring of DNS queries for this host is advised, and any inbound traffic should be logged and inspected for potential credential‑stealing attempts.

Because the site is hosted on a legitimate SaaS platform, blocking the entire Wix Studio provider may cause collateral impact; therefore, rule sets should target the specific sub‑domain rather than the broader service. Organizations that have observed phishing attempts referencing this domain should trigger incident response procedures, enforce multi‑factor authentication, and educate users about unsolicited login requests.