us06websoom[.]us

This domain is assessed as a high-risk brand impersonation campaign targeting users of the MetaMask wallet. The threat aims to deceive individuals into divulging sensitive information or performing actions that could result in financial loss or unauthorized access to their cryptocurrency accounts.

Analysis indicates that us06websoom.us has been flagged by 18 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion among the security community. The domain was registered through NameSilo, LLC on February 21, 2026, and resolves to the IP address 188.227.197.32, which is located in California and is part of the AS400897 PETROSKY CLOUD LLC network. The domain lacks an SSL certificate, further reducing its trustworthiness. Additionally, it appears on three security blocklists, including PhishDestroy, MetaMask, and SEAL, indicating that it has been identified as a malicious site by multiple sources.

To mitigate the risks associated with this brand impersonation threat, users are advised to verify the URL of any MetaMask-related websites before entering any credentials or performing transactions. It is crucial to ensure that the official MetaMask website is accessed through trusted bookmarks or direct links. Security teams should update their threat intelligence feeds to include this domain and its associated IP address, and consider implementing DNS-based blocking or web filtering solutions to prevent access to this site. Users are also encouraged to use multi-factor authentication and regularly monitor their accounts for any unauthorized activity.