secure-metamaskio-faqs[.]framer[.]website

The domain secure-metamaskio-faqs.framer.website is currently offline and returns an HTTP 404 status with the page title "Site Not Found | Framer". DNS resolution points to IP 52.223.52.2, an Amazon.com, Inc. host in the United States (AS16509). The domain was registered on November 19, 2021 through CSC Corporate Domains, Inc., and is served by the four AWS name servers ns-1243.awsdns-27.org, ns-1818.awsdns-35.co.uk, ns-336.awsdns-42.com, and ns-792.awsdns.

The TLS certificate is issued by Let's Encrypt (E7) and the site advertises HSTS and HTTP/3, indicating modern web stack usage. Technology fingerprints detect Framer Sites, React, and the aforementioned security protocols. The domain is listed on a single active blocklist, PhishDestroy, and VirusTotal records show five of ninety‑five security vendors flagging it as malicious.

Threat intelligence classifies the site as a crypto‑related brand impersonation targeting MetaMask. Defenders should ensure the IP address and associated AWS name servers are blocked at perimeter filters, add the domain to internal blocklists, and monitor for any future re‑registration or similar Framer‑based impersonation attempts. Continuous validation against threat feeds is recommended, as the current offline status does not preclude future activation.