neareintentns[.]wixstudio[.]com

Analysis of neareintentns.wixstudio.com shows that the domain has been active since 17 December 2016 and is registered through the Wix Studio platform, a commercial website‑builder service that supplies shared hosting and DNS. The authoritative name servers are dns1.p08.nsone.net through dns4.p08.nsone.net, indicating the use of NSONE as the DNS provider. The domain is listed on a security blocklist and has been explicitly blocked by the PhishDestroy sink‑hole service, confirming prior detection of phishing‑related activity.

VirusTotal records indicate that 11 of 91 scanning engines have flagged the domain, providing independent corroboration of malicious use. No public information is available regarding the underlying IP address, ASN, geographic location, SSL certificate details, HTTP response codes, or the exact page title presented to users, limiting the depth of infrastructure profiling. The absence of these data points does not imply benign behavior; rather, it reflects the current lack of publicly disclosed technical artifacts.

Defenders should consider adding neareintentns.wixstudio.com to network‑level deny lists, enforce URL filtering policies that block access, and monitor DNS queries for the listed NSONE name servers for any anomalous resolution patterns. Additional investigation, such as active probing of the web endpoint, retrieval of HTTP headers, and correlation with endpoint telemetry, is recommended to determine the specific phishing payloads or credential‑harvesting mechanisms employed. Continuous re‑evaluation is advised, given the elevated risk rating and the presence of multiple independent detections.