zionixglobal[.]fr

Analysis indicates that zionixglobal.fr is actively hosting a generic phishing site. The domain was registered on February 21, 2026 through NETIM and uses four SupremeDNS name servers (dns1.supremedns.com through dns4.supremedns.com). The site presents an HTTP 200 response with the title “Accès interdit!” and is served by Apache HTTP Server. A Sectigo DV certificate issued by Sectigo Public Server Authentication CA is in place, confirming the presence of TLS despite the malicious intent.

Network resolution points to 162.210.96.121, an address owned by LiquidNet US LLC (AS14555) and located in the United States. Security scoring services assign a Gridinsoft trust score of 0 out of 100, and six of ninety‑five antivirus engines on VirusTotal have flagged the domain as malicious. The domain appears on one external blocklist and is already blocked by the PhishDestroy feed, reinforcing its active threat status.

Current public evidence does not reveal the exact phishing landing page or the credential‑harvesting form used, nor does it disclose a specific phishing kit. The only observable artifact is the generic “Accès interdit!” page, which may be a placeholder or a deterrent page after a successful credential capture. Consequently, attribution to a particular campaign or actor remains uncertain.

Defenders should immediately block DNS resolution for zionixglobal.fr and the associated IP address 162.210.96.121 at perimeter and endpoint layers. Email gateways should be configured to reject messages that reference this domain. Continuous monitoring of the four SupremeDNS name servers for any changes, as well as periodic re‑scanning of the IP, is advised. Incident response teams should treat any login attempts to services that reference this domain as compromised and enforce credential resets.