qucoiin[.]wixstudio[.]com

Analysis of qucoiin.wixstudio.com indicates that the domain is actively being used for phishing operations and should be treated as a confirmed threat. The domain was first registered on December 17, 2016 through the Wix Studio platform, and its authoritative name servers are dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net. VirusTotal scans have returned detections from 14 of 91 security vendors, demonstrating that a measurable portion of the scanning community identifies malicious behavior associated with the host.

The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the consensus that it is being leveraged for fraudulent activity. The threat type is classified as generic phishing, and the risk level is elevated, with the current status marked as active. No additional intelligence such as IP geolocation, SSL certificate details, HTTP response codes, page title, or brand targeting is available in the current dataset, leaving those aspects of the infrastructure unverified.

Defenders should add qucoiin.wixstudio.com to network‑level deny lists, enforce DNS‑based filtering, and monitor for any outbound connections to the associated name servers. Continuous re‑scanning with multi‑vendor platforms is recommended to capture any changes in detection scores, and any future observations of content or hosting parameters should be incorporated into threat‑intel feeds to improve attribution and response capabilities.