home-bitunexx[.]wixstudio[.]com

The domain home-bitunexx.wixstudio.com is currently listed as an active generic phishing site. Registration information shows it was created on December 17, 2016 and was provisioned through Wix Studio, a popular website‑builder platform. The authoritative name servers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net, indicating reliance on the NSONE hosting infrastructure. Malware and URL intelligence aggregators have flagged the domain: thirteen out of ninety‑one VirusTotal scanners have returned a positive detection, and the domain is present on one external security blocklist. It is also explicitly blocked by the PhishDestroy feed, confirming its inclusion in at least one dedicated phishing mitigation service.

No public evidence has been released regarding the site’s IP address, SSL certificate details, HTTP response codes, or page title, and Safe Browsing status is not referenced in the supplied data. Consequently, the precise content and target brand of the phishing lure remain unknown. The lack of visible page‑level metadata limits the ability to attribute the site to a specific credential‑harvesting kit or to correlate it with known phishing campaigns. However, the combination of multi‑vendor detections, blocklist inclusion, and active status suggests a credible threat that warrants immediate defensive action.

Defenders should proactively block home-bitunexx.wixstudio.com at DNS and proxy layers, incorporate the domain into URL filtering and web‑gateway policies, and monitor for any traffic to the associated NSONE name servers that may indicate related infrastructure use. Continuous re‑scanning with VirusTotal and other sandbox services is advised to capture any evolution in payload delivery. Organizations employing Wix‑based subdomains should scrutinize newly created sub‑domains for anomalous behavior and consider enforcing strict outbound filtering for traffic to recently registered Wix Studio domains.