m-portal-metamask[.]typedream[.]app

This domain, m-portal-metamask.app, is assessed as a high-risk threat, specifically categorized as a MetaMask brand impersonation. The impersonation is designed to deceive users into believing they are interacting with the legitimate MetaMask service, potentially leading to credential theft or unauthorized access to cryptocurrency wallets.

Analysis indicates that the domain was created on January 22, 2021, and is registered through Squarespace Domains II LLC. It resolves to the IP address 104.21.37.85, which is located in the United States and is part of Cloudflare, Inc.'s AS13335 network. The domain is flagged by 15 out of 95 security vendors on VirusTotal, and Google Safe Browsing has identified it as a phishing site. Additionally, the domain appears on one security blocklist. The SSL certificate is issued by Google Trust Services, which may add a layer of perceived legitimacy to the site. The page title, 'Log-In | Metamask®: | MetaMask Help Center*', further mimics the official MetaMask web presence, enhancing the deception.

To mitigate the risks associated with this high-risk MetaMask brand impersonation, users are advised to verify the URL of any MetaMask-related login or help center pages before entering sensitive information. Security tools and browser extensions that check against known phishing sites should be enabled and updated regularly. Organizations and individuals should also educate themselves on the signs of phishing, such as suspicious URLs or unexpected login prompts, and report any such activity to the relevant authorities or security teams.