nav-kucoiins-apps[.]wixstudio[.]com

The domain nav-kucoiins-apps.wixstudio.com was observed for the first time on 8 June 2026, when its registration record was created through the Wix Studio platform. Within weeks the domain appeared on a single security blocklist and was subsequently added to the PhishDestroy blocklist, indicating that at least one phishing mitigation service has taken active steps to prevent client access. VirusTotal analysis shows that 11 of 91 scanning engines have flagged the domain as malicious, a proportion that suggests a non‑trivial level of confidence among independent detectors. The overall risk rating assigned by the reporting team is elevated, and the operational status is listed as active, implying that the infrastructure remains reachable and may still be used for credential‑harvesting or other phishing‑related campaigns.

Publicly available intelligence does not disclose the hosting IP address, ASN, or geographic location of the server, nor does it provide details about TLS certificates, HTTP response codes, or page titles. Consequently, the precise technical footprint of the site cannot be fully mapped at this time. The absence of additional blocklist entries beyond PhishDestroy, and the relatively modest number of detections on VirusTotal, indicate that the campaign may be in an early deployment phase or that its hosting environment is not yet widely recognized by other security vendors. Defenders should consider adding nav-kucoiins-apps.wixstudio.com to internal URL filtering lists, enforce strict email authentication checks, and monitor for any outbound connections to the domain from corporate endpoints.

Because the domain is hosted on a legitimate website‑building service, blocklist evasion is possible; therefore, dynamic analysis of any retrieved content and continuous re‑scanning with multi‑engine services are recommended.