# help-metamask-web.pages.dev — MALICIOUS

> help-metamask-web.pages.dev is a high-risk crypto drainer flagged for social engineering. Avoid this domain now to protect your assets.

## Summary
PhishDestroy identifies help-metamask-web.pages.dev as a high-risk crypto drainer targeting cryptocurrency users through deceptive social engineering tactics. This domain impersonates MetaMask support to steal wallet credentials and drain funds.

Registered via Cloudflare, Inc. on February 21, 2026, the domain appeared on three security blocklists and was flagged by Google Safe Browsing under social engineering. VirusTotal detected malicious activity from 15 out of 95 security vendors.

Currently offline, the domain poses no active threat, but users should remain vigilant and avoid similar phishing sites. Continuous monitoring and user education on phishing risks are recommended.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Target brand: MetaMask
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.47.82
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["chase.ns.cloudflare.com", "nataly.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 15 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Lionic", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019b4168-bf4f-748e-aa81-7c6c37d17124.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/073aa57a-e839-44da-b527-ac033ea8547d
- PhishDestroy: https://phishdestroy.io/domain/help-metamask-web.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/help-metamask-web.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/help-metamask-web.pages.dev/
Last updated: 2026-03-19