metamack[.]io

The domain metamack.io is assessed as a high-risk brand impersonation threat targeting MetaMask users. This domain poses a significant risk of misleading individuals into believing they are interacting with the legitimate MetaMask service, potentially leading to credential theft or other malicious activities.

Infrastructure analysis reveals that the domain metamack.io was created on May 19, 2026, and is registered through Spaceship, Inc. The domain resolves to the IP address 188.114.96.3. According to VirusTotal, 16 out of 95 security vendors flag this domain, indicating a moderate level of detection but also suggesting that some users may still be at risk. The domain's Gridinsoft trust score is 0/100, and its Scamadviser trust score is 1/100, both of which are extremely low and indicate a high level of suspicion. The domain appears on four security blocklists: PhishDestroy, SEAL, PhishingDB, and Maltrail, further corroborating its malicious nature. Additionally, the domain uses a Let's Encrypt SSL certificate, which is commonly employed by threat actors to gain user trust. The site employs technologies such as WordPress, MySQL, PHP, jQuery, Google Analytics, Cloudflare Browser Insights, and Cloudflare, and supports HTTP/3.

To mitigate the risk associated with this brand impersonation threat, users should be educated to verify the URL of the MetaMask website before entering any sensitive information. Security teams should monitor for and block traffic to this domain, as well as similar domains that may be registered in the future. Network administrators should consider implementing DNS filtering and web proxy solutions to prevent access to known malicious domains. Additionally, users should be encouraged to use multi-factor authentication (MFA) for their MetaMask accounts and to report any suspicious activities to the MetaMask support team.