metamasks-io[.]wixstudio[.]com

PhishDestroy identifies metamasks-io.wixstudio.com as an active brand impersonation domain targeting MetaMask users. This domain, hosted on WixStudio, mimics the official MetaMask brand to deceive visitors into surrendering credentials or assets. No drainer kit has been confirmed at this stage, but the threat type remains high-risk due to its intent to mimic a widely trusted cryptocurrency wallet platform.

This domain resolves to IP address 34.144.206.118 and operates under a Let's Encrypt SSL certificate, increasing its appearance of legitimacy. VirusTotal currently reports 3 out of 95 antivirus engines detecting this domain, indicating it remains under the radar of major security platforms. The domain is registered through Wix.com and shows no current blocklist presence as of the latest scan, though its SSL certificate suggests active operational status. No specific creation date was available at the time of analysis, but ongoing monitoring is in effect to track its lifecycle.

As of this report, metamasks-io.wixstudio.com is classified as 'active' with a status of 'under_investigation.' PhishDestroy continues to monitor this domain and coordinates with hosting providers and security vendors to ensure rapid remediation. Users are strongly advised to avoid interacting with this site and report any encounters. Remaining risk is assessed as moderate due to its impersonation tactic and low detection rate, but mitigation actions are accelerating to neutralize the threat. Regular updates will be issued as new intelligence emerges.