Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is domainops@godaddy.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
metamask[.]satoshimobile[.]health
“Download MetaMask: The Premier Crypto Wallet App and Browser Extension”
metamask.satoshimobile.health — ढका हुआ · पहुंच योग्य. ब्रांड प्रतिरूपण: MetaMask; घोटाले का प्रकार: Crypto Scam. साक्ष्य सारांश: VirusTotal 5/91 (ChainPatrol, alphaMountain.ai, CRDF, Gridinsoft, SOCRadar); URLQuery 3 alerts; 2 external blocklist matches (MetaMask, SEAL); cloaking observed; PhishDestroy score 66/100. रजिस्ट्रार: GoDaddy.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
The domain metamask.satoshimobile.health has been identified as a confirmed brand-impersonation phishing site specifically targeting users of the MetaMask cryptocurrency wallet. This domain is now in a taken-down status, but its recent activity highlights ongoing threats in the crypto space. The site was registered through GoDaddy.com, LLC and secured with an SSL certificate from GoDaddy, which may have lent it a false sense of legitimacy.
Technical indicators reveal that the domain was created on February 21, 2026, and resolves to IP address 15.197.225.128. PhishDestroy's analysis shows that it has been flagged by 1 out of 95 VirusTotal security vendors, and it appears on one security blocklist. The page title, "Download MetaMask: The Premier Crypto Wallet App and Browser Extension," was designed to trick visitors into believing they were accessing an official MetaMask download page. This kind of impersonation is a common tactic used to steal login credentials, private keys, or seed phrases, often leading to the complete loss of cryptocurrency funds.
Although the domain has been taken down, users should remain vigilant. Those who may have interacted with this site are advised to immediately change their MetaMask passwords and enable two-factor authentication. It is also crucial to verify any crypto-related URLs independently, avoiding clicking on links from unsolicited emails or messages. PhishDestroy recommends using official app stores and bookmarking the legitimate MetaMask website to avoid falling prey to similar phishing attempts in the future.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | metamask.io/_next/static/chunks/09c86d6c-f8eaf5c142c99707.js |
audit | Hunting_JS_WebAssembly |
| Private YARA rules | metamask.io/_next/static/chunks/6531-a2e1121205cf974f.js |
audit | Hunting_JS_WebAssembly |
| Private YARA rules | www.gstatic.com/draco/versioned/decoders/1.5.5/draco_wasm_wrapper.js |
audit | Hunting_JS_WebAssembly |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
Registration: satoshimobile.health
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain satoshimobile.health behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 16 identified
JavaScript runtime built on Chrome V8 engine for server-side development.
JavaScript library for building user interfaces with component-based architecture.
Cloud platform for frontend deployment, optimized for Next.js.
React framework for production with hybrid static and server rendering.
Conversion and audience tracking pixel for paid campaigns on X (Twitter) — signals that the site runs paid X ads.
business.x.comConversion-tracking pixel by LinkedIn — B2B ad audience measurement.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Tag management system for deploying marketing and analytics tags.
tagmanager.google.comWeb analytics service tracking website traffic and user behavior.
marketingplatform.google.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comModule bundler for modern JavaScript applications.
वायरसटोटल विश्लेषण
संग्रहीत साक्ष्य
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of metamask.satoshimobile.health · checked Mar 2, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260211-C98E91 Recipient: domainops@godaddy.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।