metexteoinus[.]webflow[.]io

The domain metexteoinus.webflow.io has been identified as a brand impersonation site specifically targeting MetaMask, a popular cryptocurrency wallet. This phishing domain poses as an official MetaMask resource, using the page title "Getting started with MetaMask – MetaMask" to deceive users into entering sensitive wallet information. No specific drainer kit was detected, but the site's structure suggests credential harvesting.

Technical indicators reveal a significant threat footprint. VirusTotal data shows that 15 out of 95 security vendors flagged this domain as malicious. The domain was registered through MarkMonitor, Inc. and resolves to IP address 172.64.151.8. It was created on May 08, 2013, and currently appears on 2 security blocklists. The SSL certificate is issued by Google Trust Services (WE1), which may lend a false sense of legitimacy. Google Safe Browsing status was not explicitly provided, but the blocklist presence indicates active monitoring.

As of the latest analysis, the domain is offline, meaning the hosting provider or registrar has taken action to disable the site. However, the risk remains that similar domains may appear. Users who have interacted with this site should immediately change their MetaMask passwords and enable two-factor authentication. PhishDestroy recommends always verifying URLs and using official bookmarks to access sensitive services. The unique seed b53541 was used to generate this report, ensuring distinct phrasing for each analysis.