New Registrations

MetaMask phishing domains

Newly registered lookalikes - tracked daily


MetaMask phishing domains

Newly registered lookalikes - tracked daily


Tracked (7d)
10
New (24h)
4
vs avg
About
AICrypto wallet phishing. Pages aim to capture the 12 or 24-word seed phrase or trick users into signing malicious wallet-drain transactions.
TLDs
.org (3) · .com (2) · .online (1)
Hosts
Cloudflare, Inc. (5) · OVH SAS (1) · Gransy s.r.o. (1)
Countries
United StatesUnited States (7) · GermanyGermany (1) · CzechiaCzechia (1)

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

Last check (UTC) First seen (UTC) URL Screenshot Flags Details
2026-08-24 01:32 2026-08-24 01:32
https://metamaskrestore.org
Screenshot of metamaskrestore.org Details
2026-08-24 01:31 2026-08-24 01:31
https://metamask-support.online
Screenshot of metamask-support.online Details
2026-08-23 02:18 2026-08-23 02:18
https://metamaskusdt.com
Screenshot of metamaskusdt.com Details
2026-08-23 02:18 2026-08-23 02:18
https://metamask.support
Screenshot of metamask.support Details
2026-08-22 02:29 2026-08-22 02:29
https://metamask-cards.org
Screenshot of metamask-cards.org Details
2026-08-22 02:29 2026-08-22 02:29
https://metamask-cards.one
Screenshot of metamask-cards.one Details
2026-08-22 02:29 2026-08-22 02:29
https://metamask-cards.com
Screenshot of metamask-cards.com Details
2026-08-22 02:29 2026-08-22 02:29
https://metamask-cards.app
Screenshot of metamask-cards.app Details
2026-08-21 02:05 2026-08-21 02:05
https://metamask.express
Screenshot of metamask.express Details
2026-08-18 01:41 2026-08-18 01:41
https://metamasklogin.org
Screenshot of metamasklogin.org GSB Details

Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.

URL Screenshot Details
https://metamaskrestore.org
Screenshot of metamaskrestore.org Details
https://metamask-support.onli…
Screenshot of metamask-support.online Details
https://metamaskusdt.com
Screenshot of metamaskusdt.com Details
https://metamask.support
Screenshot of metamask.support Details
https://metamask-cards.org
Screenshot of metamask-cards.org Details
https://metamask-cards.one
Screenshot of metamask-cards.one Details
https://metamask-cards.com
Screenshot of metamask-cards.com Details
https://metamask-cards.app
Screenshot of metamask-cards.app Details
https://metamask.express
Screenshot of metamask.express Details
https://metamasklogin.org
GSB
Screenshot of metamasklogin.org Details

AIHow to verify a real MetaMask URL

  • Legitimate MetaMask URLs always end in metamask.io (e.g. www.metamask.io, account.metamask.io). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not MetaMask.
  • The domains listed above were registered within the last 7 days. New-domain age is itself a signal — MetaMask has owned metamask.io for years; brand-new look-alikes are almost never legitimate.
  • If you got the link from email, SMS, or social media, do not click it. Open metamask.io from your browser bookmark or type the domain manually.
  • Real MetaMask pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.