metamaskpro[.]store

The domain metamaskpro.store has been identified as a brand impersonation threat targeting MetaMask users. Its primary malicious activity involves deceiving users by mimicking the official MetaMask brand, aiming to compromise user credentials or funds. Currently, this domain is active and poses an elevated risk to anyone attempting to interact with it under the assumption it is legitimate.

Technical analysis reveals that metamaskpro.store is flagged by 3 of 95 security vendors on VirusTotal, indicating some recognition of its malicious nature within the security community. The domain uses a Let's Encrypt SSL certificate, which may falsely lend an appearance of security to unaware users. It resolves to the IP address 51.222.104.95 and was registered by a registrar (not specified here). Additionally, metamaskpro.store appears on two security blocklists and is actively blocked by both MetaMask and SEAL security platforms. These factors correlate to an overall heightened risk and trust scores that should be considered compromised.

Given the elevated threat level and active status of metamaskpro.store, users are strongly advised to avoid accessing this domain or providing any personal information. MetaMask users should remain vigilant and verify URLs carefully to prevent account takeover or financial loss. Security teams should continue monitoring this domain and ensure it remains blacklisted in endpoint protection solutions. Immediate blocking and reporting to relevant threat intelligence communities is recommended to mitigate further victimization.