metamaskchromeweb[.]wixstudio[.]com

The domain metamaskchromeweb.wixstudio.com is currently flagged as a crypto‑drainer operation. The site is listed as active and has been blocked by the PhishDestroy feed, yet it remains reachable. Infrastructure analysis shows the domain resolves to IP address 162.159.143.12, a host associated with Cloudflare’s edge network and commonly used by Wix‑hosted sites. Registration details indicate the domain was created through Wix.com Ltd., a platform that offers free sub‑domains and often lacks stringent verification, making it a frequent vector for abuse. The registrar’s nameserver information is not available, as the NS record query returned no results. The domain appears on a single security blocklist, confirming at least one external source has deemed it malicious. VirusTotal reports indicate the URL was submitted to 95 scanning engines, none of which raised a detection; however, the absence of detections does not constitute evidence of safety and may reflect evasion techniques or limited visibility. No additional data such as SSL certificate details, HTTP response codes, page title, or Safe Browsing verdicts are presently available, leaving the content and exact phishing vector unverified. Given the confirmed crypto‑drainer classification, defenders should proactively block the domain at the network perimeter, incorporate it into URL filtering and threat‑intelligence feeds, and monitor outbound traffic for connections to the associated IP. Continuous re‑evaluation is advised, as further analysis of the landing page or observed malicious activity could expand the threat profile.