u-sa-pionex[.]wixstudio[.]com

The domain u-sa-pionex.wixstudio.com was registered on December 17, 2016 through the Wix Studio platform and continues to resolve to the nsone.net name server set (dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net). Independent telemetry shows the domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service. VirusTotal scans reveal that 12 of 91 security vendors have flagged the domain as malicious, indicating a non‑trivial level of detection across commercial scanners.

No additional public signals such as Google Safe Browsing alerts, Open Threat Exchange entries, or known SSL/TLS certificates have been observed for this host. Likewise, the page title, HTTP response codes, and any underlying phishing kit have not been publicly disclosed, leaving the exact content and target brand of the site unknown. Given the registration age, the presence on a blocklist, and multi‑vendor detection, the infrastructure is consistent with an active generic phishing operation.

Defenders should consider adding u-sa-pionex.wixstudio.com to network deny lists, ensure endpoint protection solutions ingest the VirusTotal detection count, and monitor the associated nsone.net name servers for any new sub‑domains that may appear. Continuous observation of threat‑intelligence feeds for updates on the domain’s hosting IP, possible phishing payloads, or additional blocklist listings is recommended to maintain situational awareness.