m[.]metamaskuus[.]com

The domain m.metamaskuus.com is a confirmed phishing site that impersonates the MetaMask cryptocurrency wallet through brand impersonation. It was designed to deceive users into believing they were interacting with the legitimate MetaMask platform, posing a high risk of cryptocurrency theft. As of the latest verification, m.metamaskuus.com has been taken offline, though it previously operated as an active scam targeting unsuspecting victims.

Technical analysis reveals that m.metamaskuus.com was flagged by 13 of 95 security vendors on VirusTotal, including ADMINUSLabs, ChainPatrol, and alphaMountain.ai. The domain was registered through Gname.com Pte. Ltd. on February 21, 2026, and resolved to the IP address 188.114.97.3, hosted on Cloudflare's infrastructure in the US. It appeared on three security blocklists—PhishDestroy, MetaMask, and SEAL—and used an SSL certificate issued by WE1. The observed page title was 'MetaMask,' reinforcing its fraudulent intent to mimic the legitimate service. Gridinsoft assigned it a trust score of 0/100, further confirming its malicious nature.

Users who interacted with m.metamaskuus.com should immediately revoke any token approvals granted to unknown or suspicious contracts and transfer their funds to a new, secure wallet. If credentials were entered on the site, change passwords for all associated accounts and enable two-factor authentication (2FA) where available. Report the phishing domain to MetaMask's official abuse channels, as well as platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities to aid in takedown efforts and prevent further victimization.