metana-core[.]pages[.]dev

The domain metana-core.pages.dev has been identified as a generic phishing threat, specifically a crypto drainer designed to impersonate the MetaMask cryptocurrency wallet. The site is currently offline, having been taken down after being flagged by security vendors. This domain was created on October 6, 2025, and is registered through Cloudflare, Inc., with an SSL certificate issued by Google Trust Services (WE1). It resolves to IP address 172.66.45.34. VirusTotal analysis shows that 17 out of 95 security vendors flagged this domain as malicious, and it appears on 2 security blocklists. Google Safe Browsing also flags it for phishing. The page title, "Suspected phishing site | Cloudflare," indicates that Cloudflare itself intervened to block the site.

The domain was likely used in phishing campaigns targeting cryptocurrency users, attempting to steal wallet credentials or private keys. The high risk level is supported by the multiple security vendor flags and the specific impersonation of a well-known brand. PhishDestroy recommends that users who may have interacted with this domain immediately change their MetaMask passwords and revoke any permissions granted to suspicious contracts. Always verify URLs directly from official sources and use hardware wallets for high-value transactions. The domain is now offline, but similar threats may appear under different subdomains or TLDs.