web3-exdous[.]wixstudio[.]com

PhishDestroy identifies web3-exdous.wixstudio.com as a live phishing domain delivering a counterfeit Web3 wallet interface designed to harvest private keys and seed phrases from cryptocurrency users. The threat is classified as HIGH RISK due to the imminent loss of funds for any victim who connects a wallet or pastes recovery phrases.

This domain was flagged by PhishDestroy after it appeared on four independent threat intelligence blocklists—MetaMask, PhishingArmy, SEAL and OISD—indicating widespread recognition as a fraudulent endpoint. The infrastructure resolves to 34.144.206.118 and is served via a Let’s Encrypt SSL certificate to enhance perceived legitimacy. VirusTotal analysis shows a detection ratio of 13 out of 95 security vendors, demonstrating partial but not universal coverage. The domain is hosted on WixStudio’s platform and leverages their subdomain structure to appear benign at a glance.

Mitigation requires immediate network-level and user-level actions. Security teams should block the IP 34.144.206.118 and the domain at DNS, firewall and endpoint levels. Users encountering this link must refrain from connecting any wallet, entering seed phrases or downloading files. If credentials or keys are already exposed, users should revoke all associated wallet approvals, transfer remaining assets to a new wallet, and rotate any reused passwords. Report the domain to your security provider and to PhishDestroy seed 51c680 to aid in rapid takedown.