rabbtix[.]wixstudio[.]com

Domain rabbtix.wixstudio.com was created on 17 December 2016 and is hosted on the Wix Studio platform. The authoritative name servers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net, indicating that the site is served through the NSONE infrastructure. The domain appears on a single public security blocklist and is actively listed by PhishDestroy, confirming that at least one anti‑phishing feed has identified it as malicious.

VirusTotal scans have returned nine positive detections out of ninety‑one vendors, showing that multiple sandbox and URL‑reputation engines have flagged the site. The supplied intelligence classifies the activity as generic phishing, assigns an elevated risk level, and marks the status as active. No public details on SSL certificates, HTTP response codes, or page‑title content have been disclosed, leaving the exact phishing lure and transport mechanisms unknown.

Defenders should add the domain and its associated NSONE IP ranges to blocklists, monitor DNS queries directed at the listed name servers, and enforce outbound web filtering that references the VirusTotal detection count. Continuous re‑scanning is recommended to capture any changes in the site’s payload, hosting configuration, or reputation, and threat‑intel sharing with partners can help broaden coverage of this active phishing infrastructure.