about-metamask-wallet[.]codedesign[.]app

The domain about-metamask-wallet.codedesign.app was created on February 01, 2021 and is currently listed as active with an elevated risk rating. Registration was handled through Porkbun LLC, and the authoritative name servers are fatima.ns.cloudflare.com and simon.ns.cloudflare.com, indicating reliance on Cloudflare DNS infrastructure. DNS resolution points to the IPv4 address 35.222.249.229, which is assigned to Google LLC (ASN 396982) and geolocated to the United States. The site serves an HTTPS certificate issued by Let’s Encrypt under the E7 identifier, confirming the use of a free, automated certificate authority but offering no indication of legitimate ownership.

The page title retrieved from the site consists solely of a vertical bar character ("|"), providing no meaningful branding or context. Threat analysis classifies the domain as a crypto‑related brand impersonation campaign targeting MetaMask users. Three of ninety‑five security vendors on VirusTotal have flagged the domain, and it is currently blocked by PhishDestroy and appears on one additional security blocklist. Independent reputation scoring from Gridinsoft assigns a trust score of 0 out of 100, reinforcing the malicious assessment.

No further public intelligence (e.g., OTX, Safe Browsing) is cited in the available data. Given the convergence of a brand‑specific target, a minimal detection footprint, low trust rating, and confirmed blocklist presence, defenders should prioritize immediate containment. Recommended actions include adding the domain to network deny lists, updating endpoint web‑filter policies to block the host, and monitoring outbound connections to the associated IP address for anomalous traffic. Continuous re‑evaluation is advised, as additional detection data may emerge from broader threat‑intel feeds.