- Scam type: Phishing
- Incident date: 2026-11-05
- Reported: 2026-11-05
- Last updated: 2026-11-05
These pages sit on free site-builder or blog hosts and use crypto wallet or exchange names in a "login" or "extension" page title. metamsk-logi[.]created[.]app: page title "MetaMask Login – Secure Access to Your Web3 Wallet". The page text includes "recovery phrase" and "password". Captured: page HTML 2026-11-05 15:59:37 UTC. helpmeteumsk-org[.]gitbook[.]io: page title "MetaMask Login | us". Captured: page HTML 2026-11-05 15:59:38 UTC. metamazkixtn[.]gitbook[.]io: page title "Metamask Extension | Securing Digital Assets". The page text includes "seed" and "private key". Captured: page HTML…
Websites in this report: metamsk-logi.created.app, helpmeteumsk-org.gitbook.io, metamazkixtn.gitbook.io, metauslkocxzgimens.gitbook.io, metmskluginn-auth.gitbook.io, mexmteimskt-chrome.gitbook.io, metamaskextension-us.blogspot.com, okx-walet.blogspot.com, en-kukoin.hashnode.dev, nav-kucoiinapps.hashnode.dev, loiun-kucoin.gitbook.io, space-----x-bybit-cd.typedream.app