support-metamask-us[.]pages[.]dev

On July 24, 2026, the domain support-metamask-us.pages.dev was identified as a brand impersonation threat targeting MetaMask, a popular cryptocurrency wallet. This domain has been flagged by 10 out of 93 security vendors on VirusTotal, indicating a moderate consensus among security tools regarding its malicious nature. The domain is currently offline and returns an HTTP status code 403, which suggests that access is forbidden. The page title found when the domain was active was 'Suspected phishing site | Cloudflare', further corroborating its status as a phishing site.

The SSL certificate for this domain was issued by Google Trust Services, a reputable certificate authority, which could potentially mislead users into trusting the site. The domain resolves to the IP address 172.66.44.136, which is located in the United States and is associated with AS13335 Cloudflare, Inc. The nameservers for this domain are 'ridge.ns.cloudflare.com' and 'celine.ns.cloudflare.com', both managed by Cloudflare, Inc. The domain was registered on February 21, 2026, and appears on one known security blocklist, specifically PhishDestroy. The Gridinsoft trust score for this domain is 0 out of 100, indicating a high level of distrust. The domain employs several modern web technologies including HSTS, Cloudflare, and HTTP/3, which are typically used to enhance security and performance.

Despite these security measures, the domain's content and intent are highly suspect, and it is classified as a crypto scam. Defenders are advised to block this domain and its associated IP address to prevent potential phishing attacks. Regular monitoring of domain registries and security blocklists is recommended to stay updated on similar threats. If the domain becomes active again, further analysis should be conducted to verify its legitimacy.