metamasks[.]framer[.]media
“MetaMask Login Process: A Step-by-Step Guide”
Resumen de las pruebas
On July 24, 2026, the domain metamasks.framer.media was flagged as a brand impersonation threat targeting MetaMask, a popular cryptocurrency wallet. The domain was created on November 19, 2021, and analysis indicates it was used to impersonate MetaMask with the page title 'MetaMask Login Process: A Step-by-Step Guide.' The domain has been taken offline and currently returns an HTTP 404 status, suggesting that the content is no longer accessible. Four out of 93 security vendors on VirusTotal have flagged this domain as malicious, indicating a moderate level of detection among the security community. The domain is also listed on the PhishDestroy blocklist, further confirming its association with phishing activities.
The SSL certificate for the domain is provided by Let's Encrypt, which is a common choice for legitimate and malicious sites alike. The domain resolves to the IP address 52.223.52.2, located in the United States and hosted by Amazon.com, Inc. (AS16509). The domain is registered through CSC Corporate Domains, Inc., and uses nameservers associated with AWS. The technologies detected on the domain include Framer Sites, React, HSTS, and HTTP/3, which are commonly used in modern web development.
Given the elevated risk level and the presence of the domain on a security blocklist, defenders are advised to treat any activity related to metamasks.framer.media with caution. Although the domain is currently offline, it may be reactivated in the future, and users should be wary of any unsolicited communications directing them to this domain. Defenders should monitor for any attempts to register similar domains and ensure that their systems are updated with the latest threat intelligence to prevent potential future attacks.
Data Coverage
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 13/08/2026
10 fuentes externas supervisadas Sin coincidencias
Cronología de detección
-
Estado del dominio
Accesible → Inaccesible
-
Cloudflare Radar
Análisis de Cloudflare Radar almacenado · Abrir análisis
Tecnologías
4 tecnologías identificadas con alta confianza
Análisis de VirusTotal
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.