Thank you! I just came across an article on how to understand if you are using the correct metamask and not phishing. And that's pretty interesting!

How to Ensure You’re Running the Legitimate Version of MetaMask
Check the namespace of the extension you are running
This is critical to ensure you are running the extension published by the MetaMask team, especially since we have come across many malicious clones of browser extensions. As long as the author of the extension within these browser stores remains the same (as it should), the following namespaces will remain accurate.

Full in details: https://medium.com/mycrypto/how-to-ensure-youre-running-the-legitimate-version-of-metamask-5fcd8ab32b96