New Registrations
MetaMask phishing domains
Newly registered lookalikes - tracked daily
MetaMask phishing domains
Newly registered lookalikes - tracked daily
Tracked (7d)
10
New (24h)
4
vs avg
—
Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.
| Last check (UTC) | First seen (UTC) ▾ | URL | Screenshot | Flags | Details |
|---|---|---|---|---|---|
| 2026-08-24 01:32 | 2026-08-24 01:32 | ![]() |
Details | ||
| 2026-08-24 01:31 | 2026-08-24 01:31 | ![]() |
Details | ||
| 2026-08-23 02:18 | 2026-08-23 02:18 | ![]() |
Details | ||
| 2026-08-23 02:18 | 2026-08-23 02:18 | ![]() |
Details | ||
| 2026-08-22 02:29 | 2026-08-22 02:29 | ![]() |
Details | ||
| 2026-08-22 02:29 | 2026-08-22 02:29 | ![]() |
Details | ||
| 2026-08-22 02:29 | 2026-08-22 02:29 | ![]() |
Details | ||
| 2026-08-22 02:29 | 2026-08-22 02:29 | ![]() |
Details | ||
| 2026-08-21 02:05 | 2026-08-21 02:05 | ![]() |
Details | ||
| 2026-08-18 01:41 | 2026-08-18 01:41 | ![]() |
GSB | Details |
Recently registered domains — may be used for phishing. Screenshots show parking pages while domains warm up. Use for Threat Hunting or watchlists.
| URL | Screenshot | Details |
|---|---|---|
| https://metamaskrestore.org
|
![]() |
Details |
| https://metamask-support.onli…
|
![]() |
Details |
| https://metamaskusdt.com
|
![]() |
Details |
| https://metamask.support
|
![]() |
Details |
| https://metamask-cards.org
|
![]() |
Details |
| https://metamask-cards.one
|
![]() |
Details |
| https://metamask-cards.com
|
![]() |
Details |
| https://metamask-cards.app
|
![]() |
Details |
| https://metamask.express
|
![]() |
Details |
| https://metamasklogin.org
GSB |
![]() |
Details |
AIHow to verify a real MetaMask URL
- Legitimate MetaMask URLs always end in
metamask.io(e.g.www.metamask.io,account.metamask.io). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like.xyz/.top/.vip— is not MetaMask. - The domains listed above were registered within the last 7 days. New-domain age is itself a signal — MetaMask has owned
metamask.iofor years; brand-new look-alikes are almost never legitimate. - If you got the link from email, SMS, or social media, do not click it. Open
metamask.iofrom your browser bookmark or type the domain manually. - Real MetaMask pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.







