harmonious-dolphin-597d9d[.]netlify[.]app

The domain harmonious-dolphin-597d9d.netlify.app was identified as a high-risk brand impersonation threat targeting MetaMask users. This site masquerades as the legitimate MetaMask wallet interface, attempting to trick visitors into connecting their wallets and ultimately draining cryptocurrency assets. No specific drainer kit name was identified, but the page title 'Metamask Wallet' and overall design clearly aim to deceive users familiar with the authentic platform.

Technical analysis reveals that this domain has a VirusTotal detection rate of 16 out of 95 security vendors, indicating significant malicious consensus. It is registered through Netlify, resolves to IPv6 address 2a05:d014:58f:6200::259, and uses a valid SSL certificate issued by DigiCert Inc under the DigiCert Global G2 TLS RSA SHA256 2020 CA1. Google Safe Browsing flags the site as phishing, and it appears on two security blocklists. Although the exact creation date is not provided, the domain is relatively recent, a common tactic for phishing campaigns.

Currently, the domain has been taken offline, reducing immediate risk. However, users who may have visited the site prior to takedown should take precautions: revoke any wallet permissions granted, avoid entering seed phrases or private keys, and monitor accounts for unauthorized transactions. PhishDestroy advises always verifying URLs carefully and using browser extensions that block known phishing domains. Stay vigilant against similar threats impersonating popular crypto wallets.