iometamsk-extension[.]wixstudio[.]com

This domain is flagged as a generic phishing site designed to distribute fake browser extensions. These extensions often function as crypto drainers, credential harvesters, or adware injectors, compromising user security by executing unauthorized transactions, stealing login credentials, or displaying malicious advertisements. The site may have presented itself as a legitimate software update or productivity tool to trick users into installation, after which it could exfiltrate sensitive data or perform actions without consent. Analysis indicates the domain was created on April 27, 2026, and registered through GoDaddy.com, LLC. It resolves to the IP address 34.144.206.118 and currently displays a 404 error page, suggesting it has been taken offline or moved. Despite its inactive status, the domain appears on three security blocklists, and six out of ninety-five security vendors on VirusTotal flag it as malicious. The SSL certificate, issued by Let's Encrypt (R12), does not mitigate the risk, as phishing sites commonly use valid certificates to appear legitimate. If you visited this domain or installed any software from it, immediate action is required. Disconnect the affected device from the internet to prevent further data exfiltration. Uninstall any recently added browser extensions or applications linked to this domain. Run a full system scan using updated antivirus software to detect and remove malware. Reset all passwords for accounts accessed on the compromised device, particularly those for financial services, email, and cryptocurrency wallets. Monitor bank and crypto accounts for unauthorized transactions. If sensitive data was exposed, consider reporting the incident to relevant authorities or identity protection services.