metamaskscan[.]io

The domain metamaskscan.io was identified as a phishing threat due to its impersonation of the widely-used MetaMask service. This malicious site aims to deceive users into believing it is affiliated with the legitimate brand, potentially leading to the theft of sensitive information such as cryptocurrency wallet details or login credentials.

Evidence supporting the threat nature of this domain includes its presence on three security blocklists, specifically those maintained by MetaMask, PhishDestroy, and SEAL. Additionally, six out of ninety-five security vendors on VirusTotal have flagged it as malicious. The domain was recently created on June 8, 2026, suggesting it could be part of a new phishing campaign. It has also been noted in two threat intelligence pulses on AlienVault OTX, further confirming its involvement in malicious activities.

If someone has visited metamaskscan.io, it is crucial to conduct a comprehensive security check. This should include scanning their device using reputable security software for any malware or other malicious indicators. Users are advised to immediately change any potentially compromised passwords and monitor their financial accounts for unusual activity. Furthermore, always ensure to access services like MetaMask through official channels to avoid similar threats in the future.