Latest Metamask phishing site

[Dave1]

I know that we have seen hundreds if not thousands of fake Metamask, but here is the lastest, just 3 days old.

Code:

https://www.login-metamask.io/

No puny code attack, no misspelling or something just cyber criminals creating website that is close to Metamask domain name, that why it is still very dangerous.

So do not fall for "Please type in your mnemonic phrase or private key"



So again, I need the community's help again to report this sites.

[1715564815]

1715564815

[1715564815]

1715564815

[1715564815]

1715564815

[1715564815]

1715564815

[1715564815]

1715564815

[1715564815]

1715564815

[btc_angela]

Although this kind of Metamask is not new, but still there could be some newbies that can fall for this scheme. And as others have said before, anything that ask for you to enter your seed or mnemonic phrase should be considered as phishing site and this is not a good security practice by all means specially for crypto users.

Consider any sites not trusted, until you verify everything.

[SATWAT]

Although this kind of Metamask is not new, but still there could be some newbies that can fall for this scheme. And as others have said before, anything that ask for you to enter your seed or mnemonic phrase should be considered as phishing site and this is not a good security practice by all means specially for crypto users.

Consider any sites not trusted, until you verify everything.

Mostly newbies falling in these things because they are not verifying things as they need to do so losing good amount of funds but as few members now posting here with all proofs hopefully this will help few to safe from them in future.

[rhomelmabini]

To anyone reading this specially newbies better know the real site of Metamask is https://www.metamask.io and not everything else. The real Web3 Metamask once you already have downloaded it especially on chrome extension will not ask for seeds instead will give you seed phrases and private keys on your own Ethereum address and once done and you want to login again it will ask for your password to login and not private keys or seed phrases.

[akirasendo17]

good job sir, since there are still newcomers falling from a fake metamask its nice that members are looking for this scheme and sharing it with the community to be aware, even old or people that are into crypto earlier might accidentally think that this is real, and use it, newbies should at least check it multiple times before using it and check post like this to avoid being a victim.

[Ak10]

Thank you! I just came across an article on how to understand if you are using the correct metamask and not phishing. And that's pretty interesting!

How to Ensure You’re Running the Legitimate Version of MetaMask
Check the namespace of the extension you are running
This is critical to ensure you are running the extension published by the MetaMask team, especially since we have come across many malicious clones of browser extensions. As long as the author of the extension within these browser stores remains the same (as it should), the following namespaces will remain accurate.

Full in details: https://medium.com/mycrypto/how-to-ensure-youre-running-the-legitimate-version-of-metamask-5fcd8ab32b96

[coindefi]

Newbies are common to fall for this. It is always safe to do verification first and never give your mnemonic phrase unless it is the real one.

[Action Gamble]

To anyone reading this specially newbies better know the real site of Metamask is https://www.metamask.io and not everything else. The real Web3 Metamask once you already have downloaded it especially on chrome extension will not ask for seeds instead will give you seed phrases and private keys on your own Ethereum address and once done and you want to login again it will ask for your password to login and not private keys or seed phrases.

they don't need to know just Metamask, they have to understand that private keys and seed phrases are very sensitive information, they should google the websites or apps they're about to post those things in.

[Taskford]

good job sir, since there are still newcomers falling from a fake metamask its nice that members are looking for this scheme and sharing it with the community to be aware, even old or people that are into crypto earlier might accidentally think that this is real, and use it, newbies should at least check it multiple times before using it and check post like this to avoid being a victim.

Not even newbies even long time users may fall from this fake metamask site if they will be careless to see if the one they pick is legitimate or not. And we need to be careful since it's so depressing to lose our hard earned money that's why in terms of this we need to verify always not only with metamask but the whole site we are going into.

[plvbob0070]

they don't need to know just Metamask, they have to understand that private keys and seed phrases are very sensitive information

Sadly, some people overlook the importance of the proper way of storing private keys, safe browsing, and being attentive with the clear indication of a phishing website. Being educated with its primary purpose and fundamental role in securing your financial funds will help to prevent the deceptiveness.

they should google the websites or apps they're about to post those things in.

If the official has not been bookmarked, then it should be done to easily visit the site without the need to search for it on any webpages. In searching in Google, make sure to check the URL instead of clicking the initial result. Nonetheless, every user should prioritize learning such things.

[$crypto$]

@Dave has done a lot of these phishing posts and of course this helps a lot to know, especially for beginners who still don't understand everything, you have spent so much time that it will make us more aware and not careless to check back.

There are many Metamask phishing sites that are targeted, they only want our private keys and also our prhasa so we must realize this scamers will never get tired even he will continue to spread more to catch his victims.

I think this board is very appropriate because for beginners more will know.

[Insanerman]

I know that we have seen hundreds if not thousands of fake Metamask, but here is the lastest, just 3 days old.

Good catch dude. It's just funny that they are still working hard to run such phishing websites and taking the advantage of the fact that there are tons of newbies coming onto the crypto world and first time using Metamask. Even the Metamask themselves are reminding their users to not share their private keys in any platform nor store it electronically. And even the metamask themselves doesn't really have a login website, it can only be accessed by either an app or through installing it as an extension. Hopefully, no one would be a victim of this hideous acts, in which might be keeps popping more and more duplicates soon.

[Dave1]

Another one, fairly new phishing site, just 9 days old upon discovery:

Code:

http://metamaskconnect.net/

Registrant    Spantrix Hosting
Registrant Org    Spantrix Ltd.
Registrant Country    ng
Registrar    PDR Ltd. d/b/a PublicDomainRegistry.com
IANA ID: 303
URL: www.publicdomainregistry.com,http://www.publicdomainregistry.com
Whois Server: whois.publicdomainregistry.com

(p)
Registrar Status    clientTransferProhibited
Dates    9 days old
Created on 2021-01-16
Expires on 2022-01-16
Updated on 2021-01-16    
 
Name Servers    NS1.SPANTRIX.COM (has 190 domains)
NS2.SPANTRIX.COM (has 190 domains)
   
(p)
IP Address    66.85.47.62 - 757 other sites hosted on this server