web-io-metsmask-eng[.]typedream[.]app

The domain web-io-metsmask-eng.typedream.app has been identified as a brand impersonation threat, specifically targeting MetaMask users. This domain was designed to deceive users into believing they were interacting with legitimate MetaMask support services. The page title 'Log-In | Metamask® Support*' indicates the malicious intent to collect sensitive user information under false pretenses. This type of threat is categorized as an elevated risk due to its potential to compromise user data through deceptive practices.

Technical analysis of web-io-metsmask-eng.typedream.app reveals several indicators of malicious activity. Hosted on the IP address 188.114.97.3, the domain was registered through Cloudflare, Inc., and utilized an SSL certificate from Google Trust Services / WE1. VirusTotal reports that 15 out of 95 security vendors have flagged this domain as malicious. The domain was also noted to appear on one security blocklist. The hosting infrastructure, located in the United States under AS13335 (Cloudflare, Inc.), further supports the evidence of its use for phishing activities.

Currently, the domain web-io-metsmask-eng.typedream.app is offline, which reduces its immediate threat level. It was successfully blocked by PhishDestroy, indicating proactive measures were taken to mitigate its risk. Despite being offline, the domain's previous activity suggests a need for continued vigilance against similar threats. Users are advised to verify URLs carefully and utilize comprehensive security solutions to detect and block phishing attempts. Organizations should ensure that their security teams are aware of such threats and have protocols in place to address them swiftly.