metamask[.]asia

This domain, metamask.asia, poses a direct threat to cryptocurrency users by impersonating the MetaMask wallet interface. Analysis indicates the site was designed to deceive visitors into entering sensitive credentials, such as seed phrases or private keys, which attackers could then exploit to drain digital assets from connected wallets. The threat type is classified as brand impersonation with a high-risk assessment due to its targeted nature and potential for financial loss. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with malicious registrations. VirusTotal detection data shows 22 out of 95 security vendors flagging the domain as malicious, while it appears on four independent security blocklists. The domain has since been taken offline, but its prior activity and registration details confirm its intent to facilitate fraudulent transactions or credential harvesting. Users who visited metamask.asia or interacted with the site should take immediate action. First, disconnect any wallets linked to the domain and revoke permissions via the official MetaMask interface. Second, monitor connected accounts for unauthorized transactions and transfer remaining assets to a new, secure wallet. Finally, scan local devices for malware using updated security tools, as interaction with such sites may have exposed systems to additional threats. If credentials were entered, assume they are compromised and avoid reusing them across other platforms.