cwbmg[.]xyz

The domain cwbmg.xyz is assessed as having an elevated risk level and is specifically flagged for brand impersonation. This domain poses a significant threat by attempting to impersonate Metamask, a popular cryptocurrency wallet, potentially leading to credential theft and financial loss.

Analysis indicates that cwbmg.xyz has been flagged by 3 out of 95 security vendors on VirusTotal, suggesting a low but notable level of suspicion. The domain is registered through NameCheap, Inc. and resolves to the IP address 43.174.246.32. It was created on February 21, 2026, and has been taken offline. The domain appears on 1 security blocklist and has a Gridinsoft trust score of 0/100, indicating a complete lack of trust. The page title found was 'The Blue Moon Crypto Giveaway', which is indicative of a social engineering tactic to lure users into revealing sensitive information.

To mitigate the risks associated with brand impersonation, users should verify the legitimacy of any website claiming to be affiliated with Metamask by cross-referencing the domain with official Metamask communication channels. Additionally, users should avoid entering login credentials or other sensitive information on unfamiliar sites and use multi-factor authentication to protect their accounts. Security teams are advised to monitor for similar domains and block them at the network level to prevent potential attacks.