extension-trrust[.]wixstudio[.]com

PhishDestroy identifies extension-trrust.wixstudio.com as an active generic phishing domain impersonating legitimate browser extensions. This fraudulent site is currently under investigation but remains accessible, posing a direct threat to users seeking trusted extension downloads. The domain leverages the WixStudio platform to mimic official extension sources, likely targeting cryptocurrency wallet users or software developers.

This domain was flagged by 2 of 95 VirusTotal vendors despite appearing on 2 security blocklists, including protections from MetaMask and SEAL. It resolves to IP 34.144.206.118 and operates under a Let's Encrypt SSL certificate. The threat intelligence seed 09b2ca indicates this is a recently active campaign with low initial detection rates, suggesting rapid evolution to evade security measures.

Users should avoid accessing extension-trrust.wixstudio.com entirely and verify any extension sources through official channels only. If you've interacted with this domain, scan your system for unauthorized extensions or wallet connections, and report the activity to your cybersecurity team or wallet provider immediately. This domain remains active and should be treated as high-risk until further investigation concludes.