oauths-pioneix[.]wixstudio[.]com

The domain oauths-pioneix.wixstudio.com is presently marked as an active generic phishing site and is under investigation for risk. Registration data shows the domain was created through Wix.com Ltd., a widely used website‑builder service, and the authoritative name server information is unavailable (NS_NOT_FOUND). Network resolution points to the IPv4 address 34.144.206.118, which is associated with Wix’s hosting infrastructure. The domain has been added to one external security blocklist and was flagged by the PhishDestroy sink‑hole, indicating that at least one anti‑phishing feed has observed malicious use. VirusTotal reports that the host was scanned by 95 independent security vendors, and none of those engines currently flag the domain, but the absence of detections does not constitute a safety assurance. No additional public intelligence such as Safe Browsing, OTX, or SSL certificate details is available in the current feed, leaving the content and credential‑harvesting mechanisms unverified. Because the domain resolves to a Wix‑managed IP, threat actors may be leveraging the platform’s free hosting to obscure their infrastructure, a tactic observed in other recent phishing campaigns. Defenders should continue to block the domain at perimeter and DNS filtering layers, monitor for any newly observed traffic to 34.144.206.118, and treat any credential submissions originating from this host as potentially compromised. Ongoing collection of HTTP response headers, page titles, and any observed payloads is recommended to refine the attribution and to support possible takedown actions through the registrar. The lack of name server data and limited public analysis introduce uncertainty about the exact hosting configuration and the lifespan of the site, underscoring the need for continued observation and rapid response if malicious activity is confirmed.