https://www.goforcrypto.com/fraudulent-crypto-browser-extension-redirects-to-a-fake-metamask-domain/
Fraudulent Crypto Browser Extension Redirects to a Fake Metamask Domain