nav-bitby[.]wixstudio[.]com

The domain nav-bitby.wixstudio.com is currently listed as an active generic phishing infrastructure with an elevated risk rating. Registration data shows the domain was created on December 17, 2016 and was provisioned through the Wix Studio service, indicating the use of a legitimate website‑building platform for malicious purposes. The authoritative name servers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nso, which are consistent with the NSONE hosting provider and suggest the attacker is leveraging a third‑party DNS service to obscure the underlying hosting environment.

Reputation checks reveal that the domain appears on one public security blocklist and is explicitly blocked by the PhishDestroy feed, confirming that at least one community‑maintained source has identified malicious activity associated with the host. VirusTotal analysis reports that 7 of 91 scanning engines have flagged the domain, providing additional independent confirmation of suspicious behavior. No further detail on the specific signatures or payloads used by the scanners is available in the supplied intelligence.

Because the domain is flagged by multiple detection mechanisms, defenders should treat any traffic to or from nav-bitby.wixstudio.com as potentially malicious. Recommended mitigation steps include adding the domain to outbound web filters, DNS blocklists, and endpoint allow‑list exclusions for known safe services. Network monitoring should be configured to alert on connections to the listed NSONE name servers, as they may serve as a conduit for additional command‑and‑control infrastructure. Continuous re‑evaluation is advised, as the current evidence set does not include recent HTTP response codes, SSL certificate details, or page‑title metadata, leaving the exact phishing payload and target brand uncertain.