metamaskvszeal[.]com

The domain metamaskvszeal.com was registered on May 15, 2023 through a registrar associated with a commercial website‑building service. It resolves to the IP address 18.211.166.153, which is announced by AS14618 belonging to Amazon.com, Inc., and is geographically located in the United States. The name servers are ns-cloud-a1.googledomains.com through ns-cloud-a3.googledom.com, indicating use of a cloud‑based DNS provider.

The site presents the page title “Zeal | Spend & Earn” and is flagged as an impersonation of the MetaMask brand. HTTP responses return a 302 redirect, and the TLS certificate is issued by a free certificate authority with an R12 signature. Security scoring services assign a Gridinsoft trust score of 0 out of 100, and the domain appears on two independent blocklists. Detection engines PhishDestroy and Enkrypt have already listed the site as malicious, and a single vendor on VirusTotal has raised a detection, giving a 1‑out‑of‑95 vote.

Infrastructure analysis shows the site runs on a popular website‑builder platform, utilizes a content delivery network for static assets, and enforces HTTP Strict Transport Security. Additional third‑party libraries for fonts and analytics are loaded from major cloud providers, and visitor tracking is performed through a lightweight analytics framework. These components are typical of legitimate commerce pages but do not mitigate the observed malicious behavior.

Public defenders should add the domain and its resolved IP address to network blocklists and configure email gateways to reject messages that reference the domain. Continuous monitoring of the AS14618 prefix for similar registrations is advisable, as well as periodic re‑evaluation of the domain on threat‑intel feeds. Because the page title and brand impersonation are confirmed, any user interaction that requests MetaMask credentials should be considered compromised, and users should be warned to avoid the site.