home-metamskcdn[.]wixstudio[.]com

This domain, home-metamskcdn.wixstudio.com, poses a significant threat as a phishing site designed to impersonate a widely used cryptocurrency wallet service. The site aims to deceive visitors into entering sensitive credentials, such as private keys or recovery phrases, which attackers can then exploit to drain digital assets from victims' wallets. The fraudulent nature of this site is further evidenced by its inclusion on multiple security blocklists and its targeting of users seeking wallet management or transaction services. Analysis indicates that the domain was created on December 17, 2016, though its malicious use appears to be recent. It is registered through GoDaddy.com, LLC, a common registrar for both legitimate and malicious domains. The domain resolves to the IP address 34.144.206.118 and employs a Let's Encrypt SSL certificate, which, while providing encryption, does not validate the site's legitimacy. Detection metrics reveal that 8 out of 95 security vendors on VirusTotal have flagged this domain as malicious, and it appears on five distinct security blocklists, including those maintained by cryptocurrency security entities. If a user has visited this domain or interacted with its content, immediate action is required to mitigate potential risks. First, any credentials or sensitive information entered on the site should be considered compromised and must be revoked or changed immediately. Users should disconnect any connected wallets or applications linked to the site and review recent transactions for unauthorized activity. It is also advisable to scan the device used to access the site for malware or unauthorized software. Finally, reporting the domain to relevant security organizations can help prevent further victimization and contribute to broader threat intelligence efforts.