meitamask[.]io

Analysis of the domain meitamask.io indicates that it was registered on 21 February 2026 and subsequently resolved to the IP address 75.2.18.233, which belongs to the Amazon.com, Inc. network (AS16509) and is geolocated in the United States. The site presented an SSL certificate identified as R13, but no further certificate details are available. The domain was identified as a brand‑impersonation campaign targeting the MetaMask cryptocurrency wallet, as indicated by the listed brand target and the scam type. VirusTotal recorded 11 detections out of 93 scanning engines, reflecting a moderate level of malicious classification across the security community.

Independent reputation services have assigned a Gridinsoft trust score of zero out of one hundred, suggesting an extremely low confidence in the site's legitimacy. The domain appears on a single public blocklist and is specifically listed by PhishDestroy, confirming that at least one anti‑phishing service has taken action against it. The page title observed during inspection was the literal string “meitamask.io”, providing no further contextual clues about the content served. Current operational status is offline, which limits real‑time verification of the payload or login capture mechanisms that may have been employed.

While the available data confirm the use of the domain for brand‑impersonation, the exact phishing kit, credential harvesting method, and any associated command‑and‑control infrastructure remain unknown. Defenders should update internal DNS and proxy filters to block resolution of meitamask.io and monitor for any outbound connections to the associated IP address. Incident response teams should also correlate any recent authentication attempts to MetaMask services with this domain and consider flagging related user‑reported phishing attempts.