coni-base-apps[.]wixstudio[.]com

The domain coni-base-apps.wixstudio.com was registered through Wix Studio and has been active since its creation on December 17, 2016. Analysis shows it is currently listed on three public security blocklists and is explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services, indicating that multiple threat‑intel feeds have identified malicious activity associated with this host. VirusTotal scans report that 12 out of 91 security vendors flagged the domain, reinforcing the notion of a persistent threat presence.

The domain resolves to the authoritative name servers dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, and dns4.p08.nsone.net, which are typical of shared hosting environments and do not provide additional reputation signals. No further details such as SSL certificate attributes, HTTP response codes, page titles, or explicit brand impersonation have been disclosed in the available intelligence, leaving the exact content of the site unverified. Given the high risk rating, active status, and the convergence of multiple independent detections, defenders should treat any traffic to or from coni-base-apps.wixstudio.com as malicious.

Recommended mitigation steps include adding the domain to outbound and inbound firewall deny lists, updating proxy and DNS filtering rules to block the listed name servers, and ensuring that endpoint protection solutions incorporate the latest blocklist entries from PhishDestroy, MetaMask, and SEAL. Continuous monitoring for DNS queries, TLS handshake attempts, and any anomalous connection patterns to this domain is advised, as well as conducting retrospective log analysis to identify potential past exposure. Organizations should also educate users about unsolicited communications that may reference this domain, reinforcing the need to verify URLs before entering credentials.