# metamask-wallet.com — MALICIOUS

> MetaMask-Wallet.com mimics MetaMask to steal wallet credentials and seed phrases. PhishDestroy flags this fake site, created Oct 18 2025, with 6/95 VirusTotal.

## Summary
PhishDestroy identifies metamask-wallet.com as a live brand-impersonation site designed to trick users into revealing MetaMask wallet credentials and seed phrases. The domain is engineered to look like the official MetaMask site, but it is controlled by cybercriminals and should never be used for wallet access. When victims enter their secret recovery phrase or private key, the attackers immediately drain tokens and NFTs from the compromised wallet, often within minutes of submission. This is not a theoretical risk—real funds have been stolen through similar traps, and once assets are gone, recovery is nearly impossible due to the irreversible nature of blockchain transactions.  PhishDestroy’s analysis confirms this domain was registered through HOSTINGER operations, UAB on October 18, 2025, only days ago. Independent testing by 6 of 95 VirusTotal security partners already flags this domain as malicious, and it has been blocked by the Enkrypt browser extension. The site operates from IP address 153.92.11.207 and uses a legitimate-looking Let’s Encrypt SSL certificate to appear trustworthy. These technical indicators, combined with its fresh registration and rapid detection, elevate the risk of interaction to “elevated” status. Users encountering this domain are advised to treat it as hostile and avoid all interaction.  If you have already visited metamask-wallet.com, take immediate action to protect your assets. First, disconnect the device from the internet to prevent any ongoing data exfiltration. Next, open your official MetaMask browser extension or mobile app and check your transaction history for any unauthorized transfers. If you entered your seed phrase or private key, create a brand new wallet using the official MetaMask download link and move all remaining assets to the new wallet immediately. Revoke any token approvals you may have granted to unknown contracts by visiting a reputable token approval checker such as Etherscan or Revoke.cash. Finally, run a full antivirus scan on your device to detect and remove any malware that may have been installed during your visit. Remember: always access MetaMask directly from the official website or app store links, never from search results or third-party sites.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)
- Target brand: MetaMask

## Domain Intelligence
- Registered: 2025-10-18 13:39:16
- Registrar: HOSTINGER operations, UAB
- IP: 153.92.11.207

## Detection Status
- VirusTotal: 6 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["Enkrypt"]

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/8d1d53ef-55af-447b-be47-6ef1e8864604
- PhishDestroy: https://phishdestroy.io/domain/metamask-wallet.com/
- LLM endpoint: https://phishdestroy.io/domain/metamask-wallet.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/metamask-wallet.com/
Last updated: 2026-03-22