logn-metamask-io[.]pages[.]dev

This domain, logn-metamask-io.pages.dev, poses a high risk as it is a confirmed brand impersonation site specifically targeting MetaMask users. The threat is not generic phishing but a sophisticated attempt to steal cryptocurrency wallet credentials by mimicking the legitimate MetaMask login interface.

PhishDestroy's investigation reveals alarming indicators: VirusTotal flags this domain as malicious with 12 out of 95 security vendors marking it dangerous. Google Safe Browsing also categorizes it as phishing. The domain was created on October 11, 2025, and registered through Cloudflare, Inc., resolving to IP address 188.114.96.3. It appears on at least one security blocklist, and its page title was "Suspected phishing site | Cloudflare," indicating it was taken offline. The SSL certificate is issued by Google Trust Services (WE1), which is common for legitimate sites but here used deceptively.

To stay safe, MetaMask users should never click on links from unsolicited messages or emails claiming to be from MetaMask. Always type the official URL (metamask.io) directly into the browser. Use a password manager and enable two-factor authentication. If you have already entered credentials on this site, immediately transfer funds to a new wallet and revoke any token approvals. Run a full security scan on your device and consider using a hardware wallet for added protection.