# metamaskuk.com — MALICIOUS

> metamaskuk.com impersonates MetaMask to steal data. Domain now offline but flagged for social engineering. Stay vigilant and avoid this site.

## Summary
PhishDestroy identifies metamaskuk.com as a high-risk phishing domain impersonating MetaMask to deceive users. This brand impersonation poses serious risks due to potential credential theft and financial loss.

The domain was registered in February 2026 via Gname.com Pte. Ltd. and resolved to IP 104.21.21.153. It appeared on three security blocklists and was flagged by Google Safe Browsing for social engineering. VirusTotal detected 14 out of 95 scanners raising alerts. The site is currently offline.

Users should avoid visiting metamaskuk.com and verify URLs carefully before entering sensitive information. Employ security tools and remain cautious with unsolicited links claiming to represent MetaMask or related services.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: MetaMask
- Page title: MetaMaskU.K

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Gname.com Pte. Ltd.
- Country: SG
- IP: 104.21.21.153
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["javon.ns.cloudflare.com", "nora.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Lionic", "Seclookup", "Sophos", "VIPRE"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "ScamSniffer", "Enkrypt"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0199621d-c47e-75c0-9560-63fb2bc0c3fc.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/96aad3dc-dd47-4dbc-b3b7-259154b96b51
- PhishDestroy: https://phishdestroy.io/domain/metamaskuk.com/
- LLM endpoint: https://phishdestroy.io/domain/metamaskuk.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/metamaskuk.com/
Last updated: 2026-03-19