io-sgct[.]com

This domain, io-sgct.com, is confirmed as a brand impersonation phishing site targeting MetaMask, a widely used cryptocurrency wallet service. Analysis indicates the site was designed to deceive users into divulging sensitive credentials or private keys by masquerading as an official MetaMask portal. The page title, '심테크연구소 / IO-SGCT — SimTech Global Institute,' suggests an attempt to lend legitimacy through fabricated institutional branding, a common tactic in cryptocurrency-related phishing schemes.

Infrastructure analysis reveals multiple high-risk indicators. The domain was flagged by 3 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. It was registered on May 02, 2026, through Whois Corp. and resolved to the IP address 188.114.96.3. The domain appears on three security blocklists and was proactively blocked by MetaMask, PhishDestroy, and SEAL. Detected technologies include Cloudflare, Cloudflare Browser Insights, and HTTP/3, which may have been used to obfuscate malicious activity or enhance site performance to evade detection.

As of the latest assessment, io-sgct.com has been taken offline, likely due to enforcement actions or hosting provider intervention. However, the domain's infrastructure and registration details remain a concern, particularly given the future creation date, which may indicate an attempt to evade temporal-based detection mechanisms. Users who interacted with this domain should assume credential compromise and take immediate steps to secure their accounts, including revoking access to any connected applications and monitoring for unauthorized transactions. Organizations are advised to maintain updated blocklists and monitor for similar domains leveraging the same registrar or hosting infrastructure.