mewtamask[.]io

This domain is flagged for brand impersonation, specifically targeting the MetaMask brand. The domain mewtamask.io is designed to deceive users into believing they are interacting with the legitimate MetaMask service, potentially leading to credential theft or other malicious activities. Users should be cautious and verify the URL before entering any sensitive information.

Analysis indicates that the domain mewtamask.io has been flagged by 6 out of 95 security vendors on VirusTotal, suggesting a moderate level of risk. The domain was registered through Dynadot Inc and created on March 09, 2026. It resolves to the IP address 185.66.140.182 and uses LiteSpeed and HTTP/3 technologies. The SSL certificate is issued by Let's Encrypt. The domain appears on two security blocklists, further indicating its malicious intent.

If users have visited mewtamask.io, they should immediately change their MetaMask account credentials and monitor their accounts for any unauthorized activity. It is also recommended to run a comprehensive security scan on their devices to ensure no malware was installed. Users should report any suspicious activity to their security teams and avoid clicking on links or entering information on unverified websites.