meta--mask-login[.]pages[.]dev

This domain, meta--mask-login.pages.dev, poses a high-risk threat by impersonating the official MetaMask cryptocurrency wallet service. The site was designed to deceive users into entering sensitive credentials, such as recovery phrases or private keys, which attackers could then exploit to gain unauthorized access to digital assets. Brand impersonation of this nature typically targets individuals unfamiliar with security best practices, often through misleading links distributed via email or social media platforms. Analysis indicates the domain was registered on October 14, 2025, through Cloudflare, Inc., and resolves to the IP address 172.66.46.222, associated with Cloudflare's infrastructure in the United States. Security vendors have flagged the domain extensively: VirusTotal reports 17 out of 95 engines detecting malicious activity, while Google Safe Browsing has classified it as phishing. Additionally, the domain appears on at least one security blocklist, and its SSL certificate, issued by Google Trust Services, does not mitigate the underlying threat. If you visited meta--mask-login.pages.dev or entered any credentials, immediate action is required. Disconnect the affected device from the internet to prevent further data transmission. Revoke any active sessions associated with MetaMask or other cryptocurrency wallets, and transfer remaining assets to a new, secure wallet using a trusted device. Monitor accounts for unauthorized transactions and enable multi-factor authentication where available. Users should also scan their devices for malware using updated security tools and report the incident to relevant fraud reporting platforms for further investigation.