page-metamask[.]wixstudio[.]com

The domain page-metamask.wixstudio.com has been identified as a confirmed phishing site specifically targeting users of the MetaMask cryptocurrency wallet. This brand impersonation threat, now taken offline, posed a significant risk to individuals seeking to access their digital assets. The site was designed to deceive visitors into believing they were interacting with legitimate MetaMask services, potentially leading to credential theft or financial loss.

Analysis of the domain reveals several concerning indicators. It was flagged by 6 out of 95 security vendors on VirusTotal, reflecting a moderate detection rate among antivirus engines. The domain was registered through GoDaddy.com, LLC, and was created on December 17, 2016, indicating it had been active for several years before being taken offline. It resolved to the IP address 34.144.206.118 and appeared on four security blocklists. The SSL certificate was issued by Let's Encrypt, which is a free certificate authority commonly abused by malicious actors to appear legitimate.

Currently, the site is offline, but users should remain vigilant. PhishDestroy recommends that anyone who may have visited this domain change their MetaMask passwords immediately and enable two-factor authentication. Additionally, users should verify URLs carefully before entering credentials and report any suspicious sites to relevant authorities. Staying informed about such threats is crucial for maintaining security in the cryptocurrency space.