log-metamasio--eng[.]pages[.]dev

The domain log-metamasio--eng.pages.dev has been identified as a high-risk threat due to its brand impersonation tactics targeting MetaMask users. This domain, currently offline, was initially detected as a potential phishing site with the aim to deceive MetaMask users into divulging sensitive information.

Technical analysis reveals that this domain was flagged by 12 out of 95 security vendors on VirusTotal, indicating a significant risk level. It was registered through Cloudflare, Inc., and was created on October 28, 2025. The domain's IP address, 172.66.47.10, is located in the United States under AS13335, which is associated with Cloudflare, Inc. Furthermore, Google Safe Browsing has flagged it as a phishing site, and it appears on one security blocklist, specifically blocked by PhishDestroy. The SSL certificate was issued by Google Trust Services / WE1, adding a layer of perceived legitimacy that could potentially mislead users.

Currently, the domain is offline, mitigating the immediate threat. However, users are advised to remain vigilant and exercise caution when interacting with links or emails related to cryptocurrency or wallet services, especially those resembling known brands such as MetaMask. It is recommended to verify URLs and ensure that SSL certificates are issued by trusted authorities. Additionally, employing comprehensive security solutions that offer real-time phishing protection can aid in safeguarding against such sophisticated threats. Monitoring updates from security blocklists and threat intelligence services can provide ongoing protection against emerging phishing domains.