mmapphubs[.]pages[.]dev

This domain, mmapphubs.pages.dev, is flagged for brand impersonation targeting MetaMask, a widely used cryptocurrency wallet platform. Analysis of the page title, "The Ultimate Crypto Wallet for DeFi, Web3 Apps, and NFTs | MetaMask," confirms the intent to deceive users into believing the site is an official MetaMask portal. While no direct evidence of a crypto drainer kit was observed, the domain exhibits characteristics consistent with credential theft or fraudulent wallet access schemes, commonly associated with brand impersonation in the cryptocurrency sector.

Technical indicators reveal multiple red flags. The domain was registered on March 02, 2026, through Cloudflare, Inc., and resolves to the IP address 172.66.47.180, hosted on AS13335 (Cloudflare, Inc.). Security vendor analysis on VirusTotal shows 18 out of 95 detections flagging the domain as malicious. The domain appears on two security blocklists and is currently blocked by PhishDestroy and Enkrypt. The SSL certificate is issued by Google Trust Services (WE1), a common feature in both legitimate and malicious domains leveraging Cloudflare infrastructure. No Google Safe Browsing (GSB) hits were recorded at the time of analysis.

As of the latest assessment, mmapphubs.pages.dev has been taken offline, likely due to enforcement actions by the hosting provider or domain registrar. However, the elevated risk persists due to the domain's recent creation date, its presence on multiple blocklists, and the high detection rate among security vendors. Organizations and users are advised to maintain blocklist updates, monitor for re-registration attempts under similar naming conventions, and verify the authenticity of any MetaMask-related domains before interaction. Cryptocurrency wallet users should enable multi-factor authentication and cross-check URLs against official sources to mitigate impersonation risks.