secure-meta-mast-login[.]pages[.]dev

This domain, secure-meta-mast-login.pages.dev, poses a specific threat of brand impersonation, targeting the cryptocurrency wallet MetaMask. The domain was designed to deceive users into believing they were accessing a legitimate MetaMask login page, potentially leading to the theft of sensitive information such as login credentials and private keys.

Analysis indicates that the domain was flagged by 14 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion among security professionals. The domain was registered through Cloudflare, Inc., and created on November 03, 2025. It appears on one known security blocklist, further indicating its malicious nature. The SSL certificate for the domain was issued by Google Trust Services / WE1, and it resolved to the IP address 188.114.96.3, which is located in the United States under the control of AS13335 Cloudflare, Inc. The domain has been taken offline and is currently blocked by PhishDestroy.

If users visited this domain, they are advised to immediately change their MetaMask login credentials and private keys. Users should also monitor their accounts for any unauthorized activity and consider enabling two-factor authentication for additional security. It is recommended that users report this incident to their respective cybersecurity teams or service providers and avoid clicking on suspicious links in the future.