metamask-security[.]co

Analysis of the domain metamask-security.co indicates it is an active crypto drainer threat, currently under investigation as of August 04, 2026. The domain appears on one security blocklist, specifically PhishDestroy, and is flagged by Google Safe Browsing for social engineering. No detections were recorded by the 91 vendors that scanned the domain on VirusTotal, though this absence does not confirm safety.

The domain's infrastructure and content remain unverified beyond these indicators, and no registrar, hosting provider, or SSL certificate details are currently available for further assessment. Defenders should treat this domain as high-risk due to its association with crypto drainer activity and its presence on a known blocklist. The domain name itself suggests an attempt to impersonate MetaMask, a cryptocurrency wallet service, which aligns with the observed social engineering flag.

However, without additional technical evidence—such as page content, HTTP headers, or network infrastructure—specific targeting or operational mechanics cannot be confirmed. Organizations are advised to block access to this domain at the network level and monitor for related indicators of compromise, particularly in environments where cryptocurrency transactions occur. Further analysis is required to determine the full scope of this threat, including potential ties to broader phishing campaigns or malware distribution.