access-secure-metamask[.]daftpage[.]com

Analysis indicates that access-secure-metamask.daftpage.com is an active domain engaged in brand impersonation targeting MetaMask. The domain carries a high risk classification and remains operational with an HTTP status of 308. Its page title matches Get started with MetaMask | MetaMask while the scam type is listed as cryptocurrency. The domain appears on one security blocklist and receives flags from 11 out of 95 security vendors. Google Safe Browsing has recorded a SOCIAL_ENGINEERING designation against it.
Infrastructure analysis reveals that the domain resolves to IP address 216.150.1.129 located in the US under AS16509. It was created on October 24, 2021 and registered through OVH, SAS using nameservers ns1.vercel-dns.com and ns2.vercel-dns.com. An SSL certificate issued by Let's Encrypt R13 is present. Detected technologies include Node.js, Vercel, React, Next.js, HSTS along with additional components for analytics and chat functions.
The Gridinsoft trust score stands at 0 out of 100. Defenders should treat the domain as malicious and block it at network and endpoint levels. Organizations monitoring cryptocurrency-related threats should add the IP 216.150.1.129 and associated nameservers to watchlists. Continued observation is warranted because the domain status is confirmed active as of the report date. Actionable steps include updating blocklists and sharing the indicators with trusted threat intelligence feeds for broader coverage.