metamask-chrom[.]pages[.]dev

This domain, metamask-chrom.pages.dev, is a high-risk brand impersonation site targeting MetaMask, a popular cryptocurrency wallet. The domain was registered through Cloudflare, Inc. and created on February 21, 2026. It has been flagged by PhishDestroy, a security blocklist, and is currently offline with an HTTP status of 403. The IP address 2606:4700:310c::ac42:2f05, associated with Cloudflare, Inc. and located in the United States, is the last known resolution point for this domain.

The SSL certificate is issued by Google Trust Services, indicating a secure connection, but this does not guarantee the legitimacy of the site. Technologies detected include HSTS, Cloudflare, and HTTP/3, which are commonly used to enhance security and performance. However, the domain is flagged by Google Safe Browsing for social engineering, a clear indicator of phishing intent. Analysis indicates that 12 out of 93 security vendors have flagged this domain as malicious, further corroborating the risk.

The page title, 'Suspected phishing site | Cloudflare', suggests that the domain has been taken down or is being blocked by Cloudflare. The Gridinsoft trust score of 0 out of 100 indicates a complete lack of trust in the domain. Defenders should be vigilant and ensure that this domain is blocked in their security systems to prevent potential crypto scams. While the domain is currently offline, it is advisable to monitor for any changes in status or new registrations that may indicate renewed malicious activity.