tangen-walts[.]wixstudio[.]com

The domain tangen-walts.wixstudio.com is currently flagged as an active generic phishing site with an elevated risk rating. The domain was created on 17 December 2016 and is registered through the Wix Studio platform, which is commonly used for website building and hosting. Its authoritative name servers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net, indicating reliance on the NSONE DNS infrastructure. Threat intelligence shows that the domain appears on one external blocklist and is actively blocked by the PhishDestroy service, confirming that at least one security community has identified malicious activity associated with it.

VirusTotal scans have returned 12 positive detections out of 91 submitted security vendors, providing independent corroboration of its malicious nature. No additional public indicators such as IP reputation, SSL certificate details, HTTP response codes, or page title information are presently available in the intelligence set. Consequently, the exact payload or credential‑harvesting mechanism employed by the site remains unknown.

Defenders should immediately add tangen-walts.wixstudio.com to URL filtering rules, blocklist it at network perimeter devices, and monitor for any outbound connections to the NSONE nameserver range that could indicate related command‑and‑control activity. Endpoint detection solutions should be tuned to alert on attempted connections to this domain and on any credential‑theft signatures that match known phishing vectors. Because the domain is hosted on a legitimate web‑builder service, traditional reputation scores may be insufficient; continuous re‑evaluation is advised as new observations become available.