eng-io-metamasklgn[.]pages[.]dev

The domain eng-io-metamasklgn.pages.dev was identified as a brand impersonation threat specifically targeting the Ethereum cryptocurrency wallet platform. This domain is currently offline but posed significant risk by mimicking the official MetaMask login page. PhishDestroy’s analysis confirms the page title 'MetaMask Login — Secure Access to Your Ethereum Wallet' was used to deceive users into entering sensitive credentials.

Investigation reveals that this malicious domain was flagged by 8 of 95 VirusTotal security vendors, indicating broad detection across the cybersecurity community. The domain is registered through Cloudflare, Inc. and resolves to IP address 188.114.97.3. It was created on March 5, 2026, and its SSL certificate was issued by Google Trust Services (WE1). The domain appears on three security blocklists, reflecting its known malicious nature. PhishDestroy rates this threat as elevated due to the targeted brand impersonation and potential for credential theft.

Although the domain has been taken offline, users should remain vigilant against similar threats. PhishDestroy recommends avoiding any unsolicited login prompts and verifying URLs directly through official channels. Users who may have interacted with this site should change their MetaMask passwords and enable two-factor authentication immediately. Continuous monitoring and user education are key to preventing such impersonation attacks.