metamrsklogn[.]webflow[.]io

This domain, metamrsklogn.webflow.io, poses a significant brand impersonation threat by mimicking the official MetaMask login page. The site is designed to trick users into entering their credentials, which can lead to unauthorized access to their blockchain wallets and potential financial loss. The domain's offline status suggests that it may have been taken down, but residual risks remain for those who may have interacted with it before its removal.

Analysis indicates that the domain has been flagged by 12 out of 95 security vendors on VirusTotal, suggesting a moderate level of detection. The domain was registered through MarkMonitor, Inc., and was created on May 08, 2013, indicating a potentially long-standing threat. The domain appears on 1 security blocklist, and its IP address, 172.64.151.8, is located in the United States and is associated with AS13335 Cloudflare, Inc. The SSL certificate is provided by Google Trust Services / WE1, which may lend false legitimacy to the site. These technical indicators highlight the domain's sophisticated nature and the elevated risk it poses to MetaMask users.

If users have visited metamrsklogn.webflow.io, they are advised to immediately change their MetaMask login credentials and monitor their account for any unauthorized activity. It is also recommended to run a comprehensive security scan on their devices to detect and remove any potential malware. Users should report any suspicious activity to MetaMask support and be cautious of similar domain names and login pages in the future.