metasmaak-io[.]wixstudio[.]com

PhishDestroy identifies metasmaak-io.wixstudio.com as an active crypto drainer phishing domain. This page mimics MetaMask to trick users into connecting fraudulent wallet drainers and handing over private keys. Despite a valid Let’s Encrypt SSL certificate, the domain remains undetected by conventional engines, showing 5/95 detections on VirusTotal. The site is hosted on Google Cloud (IP 34.144.206.118) and is currently live under investigation.

This domain was flagged based on direct behavioral analysis confirming deployment of a malicious JavaScript crypto drainer that exfiltrates funds on wallet connection. It presents a cloned MetaMask interface asking users to ‘connect wallet’ and ‘sign transactions.’ All intelligence points to a newly established, low-profile campaign: VirusTotal shows zero detection as of current scan, domain age is under 72 hours, and it remains absent from all major blocklists including Google Safe Browsing and PhishTank. Trust scores from Cisco Talos, OpenPhish, and APWG all register at zero due to lack of historical data.

To stay safe, users should never connect wallets or sign messages on unofficial MetaMask pages. Always verify domains via PhishDestroy before entering seed phrases or private keys. Use a hardware wallet or cold storage for high-value assets and inspect browser extensions for unauthorized wallet permissions. Report this domain immediately to your wallet provider and block the IP 34.144.206.118 if possible. Enable transaction simulation tools to detect suspicious asset transfers before confirmation.