mmwalletsecurity[.]gt[.]tc

mmwalletsecurity.gt.tc is a confirmed phishing site that specifically impersonates the MetaMask cryptocurrency wallet brand. The site's page title, 'MetaMask - Import Seed Phrase,' clearly indicates its malicious intent to trick users into entering their sensitive recovery phrases, giving attackers full control of their wallets. As of the latest analysis, this domain has been taken offline, but users should remain vigilant as similar threats frequently reappear under different domains.

Technical indicators paint a clear picture of this domain's malicious nature. It was registered through the German registrar 1API on July 25, 2025, and resolves to IP address 185.27.134.179. The domain appears on one security blocklist, and VirusTotal data shows that 7 out of 95 security vendors flagged it as malicious. Notably, the site lacked an SSL certificate, making data transmission insecure and further indicating its illegitimate nature. The combination of recent creation, brand impersonation, and low trust signals strongly supports the elevated risk level assigned to this threat.

Given that mmwalletsecurity.gt.tc is now offline, the immediate danger is reduced, but users who may have visited the site or entered seed phrases should take action immediately. Anyone who interacted with this domain must treat their MetaMask wallet as compromised and transfer all funds to a new wallet generated from a trusted source. Users should always verify URLs carefully, never enter seed phrases on any website, and rely on official MetaMask channels for support. PhishDestroy continues to monitor for new variants and recommends using a hardware wallet and enabling two-factor authentication where possible for enhanced security.