metamasksupportpronumber[.]wordpress[.]com

The domain metamasksupportpronumber.wordpress.com was created on March 03, 2000 and resolves to the IP address 198.18.3.43, which is registered to AS2635 Automattic, Inc. in the United States. The site is hosted on WordPress.com infrastructure, using nginx, HTTP/3, HSTS, and a Let’s Encrypt E8 certificate, indicating a standard WordPress deployment. The page title explicitly references a MetaMask support phone number (+1815-680-0302) and advertises a customer service helpline, clearly targeting MetaMask users. The intelligence flags the site as an impersonation of MetaMask and categorises the activity as a crypto‑related scam.

The domain appears on a single security blocklist and has been manually blocked by PhishDestroy. Its Gridinsoft trust score is 0 out of 100, reflecting an extremely low reputation. The registrar listed is MarkMonitor, Inc., a known brand‑protection service, suggesting the domain may have been hijacked or maliciously registered to exploit brand trust. A VirusTotal scan reported a single vendor detection out of ninety‑five, reinforcing the suspicion of malicious intent.

HTTP response code 200 indicates the site is actively serving content. No additional evidence about the page’s contents, form fields, or scripts is provided, leaving the exact phishing mechanics uncertain. Defenders should add the domain to URL filtering and DNS block lists, monitor traffic to the associated IP range, and enforce endpoint protection rules that flag connections to this host. Ongoing observation of any new detections or changes in reputation is advised, as the domain remains active and could be leveraged for further credential‑stealing or fraudulent crypto transactions.