metamaskcard[.]live

PhishDestroy identifies metamaskcard.live as an active brand impersonation scam targeting MetaMask users. This domain masquerades as the official MetaMask platform to deceive visitors into surrendering sensitive wallet credentials or installing malicious extensions. The threat actor behind this operation leverages the trust associated with MetaMask's brand recognition to manipulate victims into engaging with fraudulent services, including fake wallet interfaces or phishing forms disguised as legitimate login portals. Users arriving at this domain are immediately exposed to credential harvesting risks, with the potential for subsequent cryptocurrency theft or account takeover. The attackers' tactics rely on visual similarities to MetaMask's branding, including domain naming conventions and UI elements, to lower user suspicion during the initial interaction.

Technical analysis of metamaskcard.live reveals alarming indicators that confirm its malicious nature. The domain was registered on April 12, 2026, through NameSilo, LLC, a registrar known for accommodating high-risk registrations. Security assessments conducted via VirusTotal detected malicious activity, with 9 out of 95 participating vendors flagging the domain as harmful. This domain resolves to IP address 188.114.96.3 and utilizes a legitimate SSL certificate issued by Let's Encrypt, a technique commonly employed by threat actors to establish false trust through encrypted connections. The combination of a recently registered domain, high blocklist coverage, and infrastructure choices suggests an ongoing campaign rather than an opportunistic attack, with the attackers likely iterating on previous successful campaigns.

If you have visited metamaskcard.live, take immediate action to secure your MetaMask assets and accounts. First, check your browser extensions for any unauthorized or unfamiliar MetaMask-related add-ons—remove them immediately. Next, review your MetaMask transaction history for any signs of unauthorized transfers; if detected, revoke connected token approvals through MetaMask's interface or your wallet's official platform. Change your MetaMask password using the official website (metamask.io) and enable two-factor authentication to prevent future unauthorized access. Consider transferring remaining assets to a new wallet via a hardware device if you suspect your seed phrase or private keys may have been compromised. Report this domain to MetaMask's official phishing reporting channels and your browser's safe browsing service to help protect others from falling victim to this impersonation scam.