Metamask phishing site

[btc_angela]

I just want to share this, I was looking for a Atomic Wallet (atomicwallet.io) when I got to chance and see a fake metamask.

Code:

https://www.metamaskwallet.io/

Archived: https://archive.is/6g3ur

Domain Profile
Registrant Org    WhoisGuard, Inc.
Registrant Country    pa
Registrar    NameCheap, Inc
IANA ID: 1068
URL: www.namecheap.com
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, clientTransferProhibited, serverTransferProhibited
Dates    2 days old
Created on 2020-10-17
Expires on 2021-10-17
Updated on 2020-10-17

IP Address    199.34.228.76 - 22,018 other sites hosted on this server

https://whois.domaintools.com/metamaskwallet.io



https://www.virustotal.com/gui/ip-address/199.34.228.76/detection

[1715051482]

1715051482

[1715051482]

1715051482

[1715051482]

1715051482

[Mandarava]

Wow. Someone who is not as attentive and not as knowledgeable in these matters as you are will certainly fall into this trap. As soon as a new wave of interest from users arises in the cryptocurrency space, new tricks immediately arise from hackers. Thanks for posting this.

[Raflesia]

The Metamask phishing site is increasingly prevalent, not just metamask with other names, the scamer is always made the same as asking to log in with 12 keywords from the wallet so that you can control after entering it, oh god the scamer doesn't get tired if my prayer is granted then turn off the scamer .

This is very appropriate to share on this board because on average here newbie users will know if they want to use metamask so check and be careful before entering their private password.

[erikoy]

Good site. all the spelling is good unless you know the extension then you can say that it is fake.

I think high chances that many will going to fall for it. Imagine the spelling of the site is completely the same with the original wallet site. However, since it all being reported and shared here then i guess some of the members now can be aware. Not all but at least. This is the important of raising awareness so that everbody could  not fall for any trap in the likes of the phishing site.

[Bitcoin_Arena]

Nice catch OP. Isn't this supposed to be in the scam accusations board?
I think that's the place most people search when they are locking for scam or malicious websites.

I have reported the website to google safe browsing. Anybody else interested can do the same - https://safebrowsing.google.com/safebrowsing/report_phish/?hl=e

[TravelMug]

Yes, this is very dangerous site and really needs to be taken down.

The real website is: https://metamask.io/

And what makes this dangerous is that it the name is very close to the real one, so it's easy to be trap on this. I also reported it google's safe browsing. Did anyone notice though after you send the report:

Report Sent

Thanks for sending a report to Google. Now that you've done your good deed for the day, feel free to:

1. Take a second to rejoice merrily for doing your part in making the web a safer place.

So I do hope that anyone reading this will do a good deed by reporting it so that it will be taken down asap.

[libert19]

This is first phishing site where I did not see typo. Scammer did decent work here lmao

[lovesmayfamilis]

From the latest statistics, the number of phishing sites skyrocketed in 2020. This is due to general home quarantine. The number of Internet services is increasing every day, and fraud is also growing.
https://hostingtribunal.com/blog/phishing-statistics/

Perhaps we all need to get used to the realities of life, and all sites that are significant to us need to add to our browser favorites. The browser can create several profiles, which can be appointed to different needs. As a result, all sites that are on your bookmarks will be ranked. Using bookmarks is much safer than typing a site in a search engine, where there is a real danger of getting to a phishing site.

[btc_angela]

Nice catch OP. Isn't this supposed to be in the scam accusations board?
I think that's the place most people search when they are locking for scam or malicious websites.

I have reported the website to google safe browsing. Anybody else interested can do the same - https://safebrowsing.google.com/safebrowsing/report_phish/?hl=e

Thanks for reporting it, however, I felt it's appropriate to post it here as newbies never frequented scam accusations board until they themselves got scammed already.

@libert19 - yes not typo whatsoever, that's why this trick is very dangerous, plus the *.io extension, it will really look credible to a newbie or beginner.

[pakhitheboss]

If you are not at all attentive you will easily fall for this clone website. Metamask has been subjected to numerous scams using clone website or apps in the past. I once in the past thought that Metamask has a mobile app untill someone pointed out that it does not in this forum.

Beware of such scams and always check this board if you want to stay updated for the latest scams.

[Salauddin1994]

This is great news and strategy for newcomers the number of counterfeits is increasing due to the increasing demand for crypto it will keep various websites safe while using them and is a new strategy to avoid hackers. Fraudsters use this method to steal information from people by setting up a well-established website phishing is usually done via email and instant messaging fraudsters also deceive their victims and take them to their websites the website mimics the look of the original website of the concerned user's email bank or credit card.

[nakamura12]

This should be shared to all those who are going to use metamask to avoid getting phished by these scammers. Even bookmarking the real sites could lead you to trouble too even the copy paste system where a malware hacks your clipboard. Instead of pasting the original site or link but it will paste the fake one same as the address.

[btc_angela]

Another of the Metamask phishing site, but this one, it's very simply, Lol, and it's not as clean as the other fake sites. Maybe the scammers get's sloppy and in a hurry to release it.

Code:

https://metamask.org-swap.app/ 

Archived: https://archive.is/yXZ0s

Registrar    Namecheap Inc.
IANA ID: 1068
URL: https://www.namecheap.com/
Whois Server: whois.namecheap.com

(p)
Registrar Status    addPeriod, clientTransferProhibited
Dates    1 days old
Created on 2020-11-01
Expires on 2021-11-01
Updated on 2020-11-01    
 
Name Servers    DNS1.NAMECHEAPHOSTING.COM (has 953,454 domains)
DNS2.NAMECHEAPHOSTING.COM (has 953,454 domains)
   
 
Tech Contact    REDACTED FOR PRIVACY
REDACTED FOR PRIVACY,
REDACTED FOR PRIVACY, REDACTED FOR PRIVACY, REDACTED FOR PRIVACY
IP Address    162.0.235.242 - 121 other sites hosted on this server

[chanler]

I just want to share this, I was looking for a Atomic Wallet (atomicwallet.io) when I got to chance and see a fake metamask.

Code:

https://www.metamaskwallet.io/

Wow, this site really looks convincing. See the difference with the original, namely the URL link must be https://metamask.io/

And until now, it is still on Google search, not shutting down yet, already make a report to Google, hopefully, the site is shut down quickly.

Well, after I opened the site, there is likely a convincing display and everything is like the Metamask.
But, actually, there are some striking differences and they are very suspicious.

Let's see these:

1. There is no link download application of metamask
We can find the download button at the bottom of the site, but when we click it, it will direct to the telegram group https://t.me/MetaMaskGroup.

2. Fake hyperlink
Every hyperlink that is given in that site doesn't direct to what it should be, like GitHub, GitCoin, Contact Ust, and many more. All hyperlinks will be redirected to https://t.me/MetaMaskGroup. You can check them all, they are all fake

3. Fake Telegram group
When we click the telegram group we can find the group, so it is only the URL link without the existing group. I also put the username in my telegram but I found nothing/no one.

4. Almost the same team display ( but only photo)
If we check on the team menu, there are only the displays of the team photos, but no descriptions like what is on the official site.

And I am sure there are still many differences like the Login menu and more others.

So here, just be careful about this phishing.

[Upgate]

This is very terrible. We ain't safer in crypto space again. Each day scammers are developing a different strategy to dupe people of their funds.
It will be all reasonable we report this metamask phishing site asap.
Thanks for letting us know about this phishing site

[erikoy]

Fake sites or phishing sites is rampant everywhere because there is a tool that can make a sophisticated site that even a newbie could do. The tool was sold in the black market for only 1000 $ and this is why I think the reason why there are so many fake sites we had today. Anyway, fake or phiahing sites are not only targeting cryptocurrency but other financial sectors also like online banking or spending money through online transactions.

[Rengga Jati]

Code:

https://www.metamaskwallet.io/

It is still active now, let's report more this pishing site to shut down this and avoid more people tobe victims.
It is not the first time we find the fake metamask site, there were are several fake and pishing metamask sites and also application.
However, seeing the menu of this metamask, it is quite funny where we must log in to that site directly. 
The site is really different from the original one.
However, of course, we must be more and more careful. For people who do not know about it, it should be like the same moreover they also enclosure the team (although if clicked, it is the only images) LOL

2. Fake hyperlink
Every hyperlink that is given in that site doesn't direct to what it should be, like GitHub, GitCoin, Contact Ust, and many more. All hyperlinks will be redirected to https://t.me/MetaMaskGroup. You can check them all, they are all fake

You're right, they only provide one hyperlink and that is also fake, not real. I tried to join the group and it is not available.

[seoincorporation]

Stealing mnemonic phrases looks like is becoming one of the favorite ways for hackers, this kind of attack applies not only for bitcoin, the other altcoins are getting affected. Is easy for the hackers to start a new site and if a user baits then the hacker will be able to pay for tons of new sites and new domains, they even use google ads for let the fake sites get on the first results of the browser. So, we must be careful. And stop trusting in the search engines because looks like they give zero fucks.

[TravelMug]

I already reported the site the second time around. I don't know what the hell is Google waiting for.

Everyone should have a consensus effort to report every website we have seen being reported here on in the Scam Accusations board. I also do give some scam alert from time to time if I saw one in discord or telegram. For us, who have been here long enough, we can spot the fake site, but there could be beginners who might still fall for this scheme.

[btc_angela]

Probably the best thing we can do collectively, is to put pressure on Google by reporting it multiple times so that they will take actions. And big thanks for those who have reported it already!!