ositiunn[.]pro

The domain ositiunn.pro was registered on 2026-03-03 through Hostinger operations, UAB. It resolves to the IPv4 address 84.32.84.62, which is allocated to AS47583 Hostinger International Limited and geolocated to Lithuania. Both authoritative name servers are ns1.dns-parking.com and ns2.dns-parking.com, typical of parked or temporary hosting. No TLS certificate is presented, so all HTTP traffic would be unencrypted.

A single security vendor on VirusTotal reported the domain as malicious, yielding a 1-of-95 detection count. Independent scanning by Gridinsoft assigned a trust score of zero out of one hundred, indicating a high likelihood of abuse. The page title observed during a brief fetch returned "6,783.38 | SPX/USD | oredx", suggesting a potential attempt to lure victims with financial market data, though the content of the page has not been captured. The domain is currently listed on three public blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, confirming that multiple downstream filters recognize it as a phishing threat.

The service is presently taken offline, so active probing cannot be performed, and the exact payload or credential-capture mechanism remains unknown. Defenders should continue to enforce blocklisting of the host IP 84.32.84.62 and the domain itself, monitor for any re-hosting attempts on other Hostinger-controlled infrastructure, and consider adding the observed page title pattern to heuristic detection rules. Because the domain lacks SSL and uses generic parking name servers, any future resolution to the same IP range should be treated with high suspicion. Ongoing vigilance is recommended until the indicator is retired from all threat feeds.