intro-coinbaze[.]wixstudio[.]com

The domain intro-coinbaze.wixstudio.com was registered on 15 April 2026 through GoDaddy.com, LLC and is hosted on a Google Cloud infrastructure identified by IP address 34.144.206.118, which resolves to a United States location. The site is built on Wix using React and is delivered via Google Cloud CDN with HTTP/3 support. An SSL certificate issued by Let’s Encrypt (R12) is present, indicating encrypted HTTPS service despite the current offline state. A request to the domain returns an HTTP 404 status and the page title “404 Error: Page Not Found | Wix Studio”, confirming that no content is presently served.

VirusTotal analysis shows that ten of ninety‑four scanning engines have flagged the domain, and three public blocklists—PhishDestroy, MetaMask, and SEAL—have listed it as malicious. The domain’s nameservers are dns1.p08.nsone.net through dns4.p08.nsone.net, consistent with the registrar’s configuration. These indicators collectively point to a high‑risk generic phishing profile, although the offline status limits direct observation of the phishing payload or lure. Uncertainty remains regarding the specific phishing campaign details, such as targeted brands, credential‑stealing pages, or distribution vectors, because the only observable artifact is the 404 response.

No additional threat intelligence, such as OTX references or Safe Browsing verdicts, is available. Analysts should continue to monitor the domain for any re‑activation, correlate any future DNS or TLS activity with existing security telemetry, and ensure that endpoint and web filtering solutions maintain the current blocklist entries. Organizations employing the listed blocklist providers should keep those entries enforced, and any detection of traffic to the IP address 34.144.206.118 should be treated as suspicious and investigated according to incident response procedures.