cexsmasmk[.]net

The domain cexsmasmk.net is a newly identified phishing threat targeting MetaMask users. Despite having zero detections on VirusTotal, it appears on three public blocklists, including MetaMask's own. This indicates a swift response from threat intelligence platforms to mitigate potential damage. The domain is registered with Dynadot Inc and hosted on an IP managed by Cloudflare, Inc., located in the US.

PhishDestroy's early detection pipeline has flagged cexsmasmk.net within a critical 24-72 hour window post-registration. This period is crucial as phishing domains exploit the lag before antivirus databases update. The lack of VirusTotal detections underscores the freshness of the threat, not its safety. The domain's SSL certificate is issued by Google Trust Services, adding a layer of perceived legitimacy to unsuspecting victims.

The active status of cexsmasmk.net poses an immediate risk to users of the MetaMask platform. Its presence on blocklists suggests that it is already recognized as malicious by key stakeholders in cybersecurity. The combination of early detection and public blocklisting is essential in preventing phishing attacks from reaching their targets. As the domain remains active, continuous monitoring and swift action are necessary to protect users from potential scams.