I created an Issue in github (metamask) requesting them to block those two domains in their app

https://github.com/MetaMask/eth-phishing-detect/issues/150012

This is a small step, just to prevent fund losses, not a permanent solution