homepage-koinbse-ext[.]wixstudio[.]com

Analysis indicates that the domain homepage-koinbse-ext.wixstudio.com was registered on June 08, 2026 through the Wix Studio platform and is currently active. The domain resolves to the IP address 34.144.206.118, which is the sole hosting endpoint observed. It appears on one external security blocklist and has been specifically blocked by the PhishDestroy mitigation service, confirming that at least one reputable anti‑phishing feed has catalogued it as malicious. VirusTotal scans show that 13 of 91 security vendors have flagged the domain, providing additional independent corroboration of its malicious status.

The threat type is identified as generic phishing, and the risk level has been assigned as elevated, reflecting the combination of recent creation, active hosting, and multiple detections. No further technical details such as SSL certificate attributes, HTTP response codes, or page title content are presently available, so the exact presentation layer of the phishing campaign remains unknown. Defenders should prioritize immediate containment actions: add the domain and its resolved IP address to internal deny lists, update web‑filter and DNS sinkhole rules, and ensure that any outbound connections to the IP are blocked at the firewall level. Continuous monitoring of DNS queries for the domain and traffic to the associated IP is recommended to detect any residual or opportunistic use.

Organizations employing email security gateways should enrich their detection policies with the known indicator set, including the domain name, registration date, hosting provider, and the 13 vendor detections, to improve early quarantine of malicious messages. Given the recent creation date, threat actors may be leveraging the Wix Studio service to host additional phishing sites, so periodic re‑evaluation of related subdomains is advisable.