metamaskio-auth[.]tem3[.]io

PhishDestroy identifies metamaskio-auth.tem3.io as an active malicious domain engaged in brand impersonation targeting MetaMask users. The domain is currently classified as a high-risk threat and remains operational, posing a significant risk to cryptocurrency holders seeking secure wallet access. This domain exhibits multiple indicators of compromise, including a 16/95 detection ratio on VirusTotal, registration through GoDaddy.com, LLC, resolution to IP 188.114.97.3, and a creation date of August 02, 2024. Security blocklists have flagged this domain once, while Google Safe Browsing classifies it under SOCIAL_ENGINEERING tactics. Additionally, the domain holds an SSL certificate issued by Google Trust Services, potentially misleading users into believing its authenticity. The combination of brand impersonation, cryptocurrency targeting, and active status demands immediate action. Users encountering this domain should avoid interaction entirely. MetaMask has officially blocked this domain, and its presence on security blocklists further confirms its malicious nature. PhishDestroy recommends verifying any MetaMask-related domains through official channels before engagement. Implementing DNS filtering to block 188.114.97.3 and monitoring for similar impersonation attempts will enhance organizational security posture against crypto drainer operations.