en-exods-web3[.]wixstudio[.]com

PhishDestroy has identified en-exods-web3.wixstudio.com as a generic phishing domain with elevated risk, specifically targeting users of web3 platforms as a crypto drainer. This domain, registered on April 26, 2026, through GoDaddy.com, LLC, was designed to impersonate legitimate Wix Studio services to steal cryptocurrency credentials and assets. The page title displayed a 404 error, suggesting the site was taken offline shortly after detection, but the underlying threat remains significant for anyone who may have visited it.

Technical indicators paint a clear picture of malicious intent. VirusTotal reports that 4 out of 95 security vendors flag this domain, and it appears on 3 security blocklists. The domain resolves to IP address 34.144.206.118 and uses a Let's Encrypt / R12 SSL certificate, which is common among phishing sites to appear legitimate. Google Safe Browsing status is not explicitly listed, but the presence on multiple blocklists suggests active monitoring and blacklisting by security communities.

Currently, the domain is offline and returning a 404 error, which likely indicates that the hosting provider or registrar has taken action in response to abuse reports. However, the risk is not entirely mitigated, as similar domains may reappear under different names. PhishDestroy advises users who may have interacted with this site to change their passwords and enable two-factor authentication on any associated accounts. The elevated risk level warrants ongoing vigilance, and users should avoid any similar unsolicited web3-related links.