static[.]170[.]17[.]217[.]95[.]clients[.]your-server[.]de

The domain static.170.17.217.95.clients.your-server.de is a phishing site engaged in brand impersonation targeting MetaMask users. It poses an elevated risk as a cryptocurrency scam, designed to deceive victims into disclosing sensitive wallet information or credentials. The site has been taken offline, but prior activity indicates it was actively used for fraudulent purposes.

Technical indicators confirm the domain static.170.17.217.95.clients.your-server.de was flagged by 2 of 95 VirusTotal security vendors, including G-Data and Gridinsoft. It appears on one security blocklist, PhishDestroy, and was created on February 21, 2026. The domain resolves to the IP address 104.18.50.34, hosted by Cloudflare, Inc. in the US (AS13335). No SSL certificate was issued, and the observed page title was 'MetaMask'. Google Safe Browsing did not flag the domain at the time of analysis.

Users who interacted with static.170.17.217.95.clients.your-server.de should immediately revoke any token approvals granted to unknown contracts and transfer funds to a new wallet. Change passwords for any accounts accessed via the phishing site and enable two-factor authentication. Report the domain to MetaMask support, the hosting provider (Cloudflare), and platforms like PhishTank or Google Safe Browsing to aid in takedown efforts.