metamask-crypt-supportt[.]lovable[.]app

The domain metamask-crypt-supportt.lovable.app has been identified as a high-risk phishing infrastructure specifically designed for brand impersonation. This domain currently remains active and is confirmed to target MetaMask, a widely used cryptocurrency wallet service. Analysis indicates the site mimics legitimate MetaMask support or transaction verification pages to deceive users into disclosing sensitive credentials or transferring digital assets. Technical indicators reveal the domain resolves to the IP address 185.41.148.1 and employs an SSL certificate issued by Google Trust Services, which may lend an appearance of legitimacy. VirusTotal analysis shows that 1 of 95 security vendors has flagged this domain as malicious, suggesting detection remains limited but present. Infrastructure analysis further indicates the domain is hosted on a platform that allows rapid deployment of subdomains, a common tactic in phishing campaigns to evade detection and maintain operational agility. No historical registration data or creation date was provided, but the low detection rate implies the domain may be relatively new or employing evasion techniques. Current status confirms the domain remains active and poses a continued threat to users. Organizations and individuals are advised to block the domain and its associated IP address at the network perimeter. End-users should be cautioned against interacting with any communications or websites claiming affiliation with MetaMask that originate from this domain. Security teams are recommended to monitor for additional subdomains under the lovable.app parent domain, as attackers may pivot to new addresses to sustain the campaign. Immediate reporting to relevant hosting providers and certificate authorities is advised to facilitate takedown efforts.