On your end, MetaMask wallet Plugin keeps records of all web3 sites and dapp your wallet have connected with.

Finding unrecorded connection through Etherscan (which is not recorded by your plugin), shows the wallet is Vulnerable.

I am keeping records of every review and screenshot of my findings on the MetaMask attack.