id-metamask[.]app

The domain id-metamask.app is a confirmed brand impersonation threat specifically targeting MetaMask, a popular cryptocurrency wallet. This phishing domain has been taken offline, but its recent activity poses a risk to users who may have encountered it while it was active. The domain was created on February 21, 2026, and was designed to trick users into revealing sensitive information such as wallet credentials or private keys.

Technical analysis reveals that id-metamask.app resolves to IP address 74.81.40.146 and was registered through Dynadot LLC. VirusTotal flagged it with 8 out of 95 security vendors detecting malicious activity, and it appears on 3 security blocklists. The domain lacks an SSL certificate, which is a common red flag for phishing sites. Despite the low blocklist count, the high vendor detection rate underscores the threat it posed.

As the domain is now offline, the immediate risk is mitigated. However, users who may have visited id-metamask.app should remain vigilant for any unauthorized access to their MetaMask wallets and consider changing passwords and enabling two-factor authentication. PhishDestroy recommends avoiding any interaction with this domain and reporting it to security authorities if encountered again. Always verify URLs directly from official sources and never enter sensitive information on unverified sites.