jaaxxlibarty[.]wixstudio[.]com

Analysis date July 29 2026. The sub‑domain jaaxxlibarty.wixstudio.com is currently flagged as an active generic phishing infrastructure. Registration data show the domain was created on December 17 2016 and the registrar is listed as Wix Studio, a platform that provides free website hosting and builder services. The authoritative name servers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net, confirming the use of NSONE’s DNS service. Reputation checks indicate the domain is listed on one public security blocklist and has been blocked by the commercial anti‑phishing feed PhishDestroy.

VirusTotal scans returned 12 positive detections out of 91 submitted scanners, demonstrating that a minority of commercial AV engines recognize the site as malicious. No additional data such as IP address, SSL certificate details, HTTP response codes, or Safe Browsing verdicts are presently available in the intelligence set. The presence of multiple detections across independent vendors, combined with blocklist inclusion and the fact that the domain is actively hosted on a legitimate website‑builder platform, suggests that threat actors are exploiting the Wix infrastructure to host phishing pages. The exact content of the site, targeted brands, and the phishing kit employed have not been disclosed, leaving those aspects uncertain.

Defenders should continue to block traffic to jaaxxlibarty.wixstudio.com at perimeter and DNS layers, add the domain to internal blocklists, and monitor for related sub‑domains that share the same NSONE name‑server set. Organizations using Wix‑hosted services should review any recent credential‑capture incidents for possible correlation. Periodic re‑scans on VirusTotal or similar services are recommended to capture any changes in detection scores.