v4[.]remote-supportnetwork[.]online

v4.remote-supportnetwork.online was observed on July 12, 2026 as an active brand‑impersonation site targeting Metamask users. The page presents a title “Chainsafe Initiate Troubleshooting – We’ve Got You Covered!” and is classified under both airdrop and wallet‑connect phishing campaigns. The combination of a familiar brand reference and a troubleshooting façade is consistent with high‑confidence phishing kits that lure victims into disclosing private keys or approving malicious wallet connections. The domain was registered on February 21, 2026 through Porkbun LLC and uses three Porkbun‑associated nameservers (curitiba.ns.porkbun.com, fortaleza.ns.porkbun.com, maceio.ns.porkbun.com). DNS resolution points to IP address 82.29.188.85, which belongs to AS47583 Hostinger International Limited and is geolocated in Great Britain. The host provides no TLS certificate, and HTTP requests return a 403 status, indicating intentional denial of access to casual browsers while still serving content to scripted probes. VirusTotal analysis shows that 2 of 95 security vendors have flagged the domain, and Gridinsoft assigns a trust score of 0 out of 100. The site is currently listed on a single public blocklist and has been added to the PhishDestroy blacklist. These signals, combined with the low trust score and the presence of brand‑specific terminology, reinforce the assessment of a high‑risk phishing operation. Defenders should immediately block the domain at perimeter firewalls and proxy devices, and add the IP address 82.29.188.85 to deny lists. Network monitoring tools ought to alert on any outbound connections to the host, and email filtering should be tuned to catch messages that reference Metamask troubleshooting or airdrop incentives. User‑facing security awareness campaigns must warn users that legitimate Metamask support never uses URLs containing “remote‑supportnetwork” and never asks for private keys or wallet‑connect approvals through unsolicited links.