welcome-metamask-loginn[.]typedream[.]app

This domain, welcome-metamask-loginn.typedream.app, is flagged as a brand impersonation threat targeting MetaMask, a widely used cryptocurrency wallet service. Analysis indicates the site presents a fake login interface designed to harvest user credentials, potentially enabling unauthorized access to digital assets. No direct evidence of a crypto drainer kit was observed, but the credential-harvesting mechanism aligns with common attack vectors used in cryptocurrency theft. Infrastructure analysis reveals the domain was registered through Typedream and resolves to the IP address 188.114.97.3, associated with AS13335 (Cloudflare, Inc.). The SSL certificate is issued by Google Trust Services (WE1). VirusTotal detection shows 10 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist and is currently blocked by PhishDestroy. No creation date was provided in available intelligence, and Google Safe Browsing status remains unconfirmed. The domain has been taken offline, reducing immediate risk to users. However, residual threats persist, including potential reuse of the infrastructure for future phishing campaigns or the reactivation of the domain under altered parameters. Users who interacted with the site are advised to revoke any active sessions, reset credentials, and monitor associated accounts for unauthorized activity. Organizations should update blocklists to include this domain and its resolved IP to prevent future access attempts.