MALICIOUS — CRITICAL
feesgas[.]io
The domain feesgas.io is identified as a phishing site involved in brand impersonation targeting MetaMask users.
- VirusTotal
- 2/95
- Blocklists
- 3 · MetaMask, ScamSniffer
- Disponibilità
- Contenuto non disponibile · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
feesgas.io — Contenuto non disponibile (HTTP 502). Simulazione del marchio: MetaMask; Tipo di truffa: Wallet/seed Phishing. Riepilogo delle prove: VirusTotal 2/95 (Gridinsoft, SOCRadar); 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 74/100. Registrar: Immaterialism.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Evidence Analysis
The domain feesgas.io is identified as a phishing site involved in brand impersonation targeting MetaMask users. This domain poses an elevated risk due to its deceptive nature, aiming to trick users into revealing sensitive information related to their cryptocurrency wallets. The site has been taken offline, reducing immediate risk, but users who may have interacted with it should remain vigilant.
Technical analysis of feesgas.io shows that it was flagged by 2 out of 95 vendors on VirusTotal, specifically Gridinsoft and SOCRadar. The domain was registered through Immaterialism Limited on February 21, 2026, and resolves to the IP address 188.114.97.3, located in the US under AS13335 Cloudflare, Inc. It is listed on four security blocklists, including PhishDestroy, MetaMask, ScamSniffer, and SEAL. The SSL certificate was issued by Google Trust Services / WE1, and the site utilized technologies such as HSTS, Cloudflare, and HTTP/3. The page title observed was 'FeesGas.io'.
Individuals who have interacted with feesgas.io, especially those using MetaMask, are advised to take immediate safety steps. These include revoking any token approvals associated with the wallet, moving funds to a new wallet, and monitoring for any unauthorized transactions. Users should also report any phishing attempts to relevant authorities or platforms to help mitigate the threat. Ensuring up-to-date security measures, such as enabling two-factor authentication, is recommended to protect against future phishing scams.
Copertura dei dati12 recorded checks
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisi di VirusTotal
Prove archiviate
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of feesgas.io · checked Mar 2, 2026
Dati e relazioni esterneIndependent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.