metimasklogisn[.]github[.]io

The domain metimasklogisn.github.io is identified as a generic phishing threat. It impersonates the well-known cryptocurrency wallet brand, MetaMask, and features a login interface designed to capture user credentials. The infrastructure does not appear to utilize a specific drainer kit, but its design is typical of phishing schemes aimed at stealing sensitive information.

Technical indicators reveal that this domain has a VirusTotal score of 22/95, indicating that 22 security vendors have flagged it as malicious. The domain is registered through GitHub, Inc., and resolves to the IP address 185.199.108.153, which is located in the United States. The current status of the domain is active, and it has been recorded on three security blocklists, including PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Let's Encrypt, which is commonly used by legitimate sites but can also be exploited by malicious actors.

As of now, the domain remains active and poses a high risk to potential victims. Users are advised to exercise caution and avoid entering personal information on this site. Immediate response actions should include reporting the domain to relevant authorities and reinforcing security measures such as multi-factor authentication for sensitive accounts. Continuous monitoring of this domain is necessary to assess any changes in its activity or status.