quizzical-wescoff-9b0b22[.]netlify[.]app

The domain quizzical-wescoff-9b0b22.netlify.app has been identified as a brand impersonation threat specifically targeting Metamask users. This malicious site attempts to deceive visitors into believing it is an official Metamask platform, likely to steal cryptocurrency credentials or drain wallets. The page title displayed is "METAMASK," which reinforces the impersonation attempt and increases the risk of successful social engineering.

Technical analysis reveals that this domain is flagged by 18 out of 95 security vendors on VirusTotal, indicating widespread recognition as malicious. It was registered through Name.com, Inc (Netlify) and resolves to IP address 35.157.26.135. The domain was created on February 21, 2026, and its SSL certificate is issued by DigiCert Inc (DigiCert Global G2 TLS RSA SHA256 2020 CA1). Despite appearing on only one security blocklist, the high VT detection rate and active status underscore the imminent threat it poses.

As of now, the domain remains active and accessible, continuing to put users at risk. PhishDestroy recommends that organizations block this domain immediately and educate users about the risks of interacting with unsolicited Metamask-related websites. Users should always verify URLs before entering credentials and enable two-factor authentication on their cryptocurrency accounts. The remaining risk is significant due to the domain's active status and the lack of takedown action observed.