us-ettoroapps[.]wixstudio[.]com

Analysis of us-ettoroapps.wixstudio.com shows that the domain is actively used for a generic phishing campaign as indicated by the threat classification. The domain was created on 17 December 2016 and is registered through Wix Studio, a legitimate website‑building service. Its authoritative name servers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net and dns4.p08.nsone.net, which are consistent with the NSONE hosting provider.

VirusTotal reports that three of ninety‑one security vendors have flagged the domain, demonstrating that at least a subset of scanners have identified malicious behavior. The domain is currently blocked by the PhishDestroy mitigation service and appears on one external security blocklist, reinforcing the assessment of malicious intent. No additional public evidence such as SSL certificate details, HTTP response codes, page title, or content snapshots is available in the supplied intelligence, leaving the exact phishing payload and targeted brand unspecified.

The lack of disclosed IP address or hosting infrastructure limits deeper attribution, but the combination of vendor detections, blocklist presence, and registrar information is sufficient for defensive action. Defenders should add us-ettoroapps.wixstudio.com to URL filtering and DNS block policies, monitor for any related sub‑domains hosted on the same name servers, and consider sharing the indicator with threat‑intelligence feeds. Ongoing observation is recommended to capture any future changes in hosting or content that could refine the threat profile.