New Registrations
MetaMask phishing domains
Newly registered lookalikes - tracked daily
MetaMask phishing domains
Newly registered lookalikes - tracked daily
Tracked (7d)
6
New (24h)
0
vs avg
—
- Countries
United States 
Cyprus
Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.
| Last check (UTC) | First seen (UTC) ▾ | URL | Screenshot | Flags | Details |
|---|---|---|---|---|---|
| 2026-05-18 00:51 | 2026-05-18 00:51 |  |
Details | ||
| 2026-05-16 00:57 | 2026-05-16 00:57 |  |
Details | ||
| 2026-05-16 00:56 | 2026-05-16 00:56 |  |
Details | ||
| 2026-05-15 01:06 | 2026-05-15 01:06 |  |
Details | ||
| 2026-05-15 01:06 | 2026-05-15 01:06 | |
Details | ||
| 2026-05-14 01:04 | 2026-05-14 01:04 | |
Details |
Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.
| URL | Screenshot | Details |
|---|---|---|
| https://metamaskx.com
|
|
Details |
| https://metamaskx.online
|
|
Details |
| https://metamask.finance
|
|
Details |
| https://metamasksupportweb3.c…
|
|
Details |
| https://metamaskapp.download
|
|
Details |
| https://metamaskcrypto.vip
|
|
Details |
AIHow to verify a real MetaMask URL
- Legitimate MetaMask URLs always end in
metamask.io(e.g.www.metamask.io,account.metamask.io). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like.xyz/.top/.vip— is not MetaMask. - The domains listed above were registered within the last 7 days. New-domain age is itself a signal — MetaMask has owned
metamask.iofor years; brand-new look-alikes are almost never legitimate. - If you got the link from email, SMS, or social media, do not click it. Open
metamask.iofrom your browser bookmark or type the domain manually. - Real MetaMask pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.