metaamaskerlogin[.]webflow[.]io

The domain metaamaskerlogin.webflow.io impersonates the popular cryptocurrency wallet MetaMask, posing a risk for users attempting to access their accounts. With a VirusTotal score of 15/95, this domain has been flagged as suspicious by various security vendors. The impersonation of a well-known service heightens the likelihood of successful phishing attempts, making it a significant concern for users in the cryptocurrency space.

Registered with MarkMonitor, Inc., this domain has been active for over 12 years, living on IP address 198.18.0.188. The associated infrastructure shows signs of malicious intent, including a notable presence on blocklists, with four entries indicating ongoing phishing activities. Such longevity and persistent presence suggest an organized approach to the phishing campaign, which remains a challenge for the security landscape.

Currently, the domain has been taken down following proactive measures by PhishDestroy, which includes reporting the domain and monitoring its status. This action helps protect potential victims from falling prey to phishing scams associated with this domain.