metmask-extensions[.]wixstudio[.]com

The domain metmask-extensions.wixstudio.com is currently flagged as an active generic phishing infrastructure. Defensive intelligence indicates that the site has been blocked by the PhishDestroy service and appears on a single external security blocklist, confirming that at least one reputable anti‑phishing feed has identified it as malicious. Registration data shows the domain was created through Wix.com Ltd., a widely used website‑builder platform, which may complicate takedown efforts because the registrar often hosts large numbers of legitimate sites.

DNS resolution points to the IP address 162.159.143.12; no nameserver information is available (NS_NOT_FOUND), limiting the ability to assess the full DNS hierarchy. VirusTotal reports that the domain has been scanned by 91 independent vendors, none of which have raised a detection at the time of analysis. While the absence of vendor flags reduces the immediate likelihood of known malware payloads, it does not constitute proof of safety, as many phishing sites evade detection through rapid content changes or use of clean‑hosting services.

No additional telemetry such as SSL certificate details, HTTP response codes, page titles, or content signatures is presently available, leaving the exact visual or functional characteristics of the site unverified. Defenders should therefore treat the domain as hostile: add the domain and its resolving IP to network‑level deny lists, enforce DNS sinkholing for the hostname, and monitor outbound traffic for connections to 162.159.143.12. Continuous re‑scanning of the domain through multi‑vendor services is recommended to capture any future changes in payload or hosting behavior.