public-metamask-my[.]framer[.]ai

This site impersonates the MetaMask brand and is categorized as a cryptocurrency scam. The page title, "Home|MetaMask Wallet Login | Fast & Secure Access," indicates it was designed to deceive users into believing it is the legitimate MetaMask login portal. The threat posed is credential theft and potential cryptocurrency wallet compromise, as victims may enter sensitive login information or private keys on this fraudulent page.

Technical analysis reveals the domain was created on 2023-04-04 and registered through CSC Corporate Domains, Inc. The IP address 35.71.142.77 is hosted in the United States on AS16509 (Amazon.com, Inc.). VirusTotal reports 7 detections out of 95 vendors, with specific flags from ChainPatrol, alphaMountain.ai, CyRadar, Fortinet, and Google Safebrowsing. The site uses a Let's Encrypt SSL certificate (E8) and is listed on 3 blocklists. Nameservers point to AWS DNS infrastructure.

The site is currently offline. Given the impersonation of a well-known cryptocurrency brand, the confirmed phishing indicators, and the detection by multiple security vendors, the risk level is assessed as high. Users should avoid any interaction with this domain if it becomes active again.