rabbitx-intro-en[.]wixstudio[.]com

rabbitx-intro-en.wixstudio.com is currently classified as an active generic phishing infrastructure with an elevated risk rating. The domain was created on 17 December 2016 and is registered through the Wix Studio service, indicating the use of a legitimate web‑hosting platform to conceal malicious activity. Analysis of public threat‑intel feeds shows that five of ninety‑one VirusTotal scanners have flagged the domain as malicious, and it appears on one external blocklist.

The anti‑phishing service PhishDestroy has explicitly blocked the domain, reinforcing the suspicion of phishing use. Technical resolution data lists four NS1‑hosted nameservers (dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net), which are typical of the NSOne DNS provider and do not themselves imply benign or malicious intent. Beyond these points, no publicly available information on the hosting IP address, SSL certificate details, HTTP response codes, page title, or content has been released, leaving the precise delivery mechanism and targeted brand undefined.

Consequently, defenders cannot confirm the exact phishing lure or victim profile at this stage. Given the observed detections, blocklist presence, and confirmation from PhishDestroy, security teams should proactively deny network connections to rabbitx-intro-en.wixstudio.com, add the domain to internal URL filtering policies, and monitor DNS queries for the listed NSOne nameservers. Continuous re‑evaluation is advised, as further reconnaissance may reveal additional indicators such as payload delivery URLs or compromised credential harvesting pages.