download[.]metamask[.]softwareszones[.]com

PhishDestroy has identified download.metamask.softwareszones.com as an active threat impersonating MetaMask. This domain likely hosts a fake MetaMask download or login page, aiming to steal cryptocurrency and private keys from unsuspecting users. Visitors are at risk of installing malware or entering their credentials on a fraudulent website.

Evidence suggests this domain is malicious: as of this report, 11 out of 95 security vendors on VirusTotal flag it as dangerous. The domain, registered through Network Solutions, LLC, was created recently on September 07, 2025. It also appears on 2 security blocklists, including MetaMask's own blocklist and SEAL, further indicating its malicious nature. The domain resolves to IP address 157.250.198.109 and utilizes an SSL certificate issued by Let's Encrypt.

If you have visited download.metamask.softwareszones.com and entered your MetaMask seed phrase or private key, immediately transfer your funds to a new, secure wallet. Scan your computer for malware and change your passwords for any accounts that may have been compromised. Exercise extreme caution when downloading software or entering sensitive information online, and always verify the authenticity of websites before interacting with them.