secure-metamask-log[.]daftpage[.]com
“MetaMask Help Center”
Rilevamento memorizzato
Avviso di cloaking
- Tipo di cloaking
content_split- Punteggio di cloaking
- 1/6
Riepilogo delle prove
The domain secure-metamask-log.daftpage.com is currently classified as a high‑risk brand‑impersonation site targeting MetaMask. The page title returned by the server is "MetaMask Help Center", indicating an explicit attempt to masquerade as an official support portal. The threat type is recorded as cryptocurrency, and the overall risk level is high with the status marked as active as of 12 July 2026. Infrastructure analysis shows the domain was registered on 24 October 2021 through OVH, SAS and is served by the Vercel DNS infrastructure (ns1.vercel-dns.com, ns2.vercel-dns.com). It resolves to IP 216.150.16.193, which belongs to ASN 16509 operated by Amazon.com, Inc., and is geolocated to the United States. The site presents a TLS certificate issued by Let’s Encrypt (R13) and responds with HTTP status code 308, indicating a permanent redirect. Threat‑intel feeds list the domain on one security blocklist and it is blocked by PhishDestroy. VirusTotal scans have flagged the domain with 10 out of 95 security vendors, while Gridinsoft assigns a trust score of 0 out of 100. Automated analysis detects a web stack comprising Node.js, React, Next.js, Vercel, HSTS, Google Analytics, and Crisp Live Chat. The observed phishing kit is identified as a Seed Phrase Phishing module, consistent with the cryptocurrency scam classification. Defenders should prioritize network‑level blocking of 216.150.16.193 and domain‑level filtering for secure-metamask-log.daftpage.com. Continuous monitoring of DNS queries and TLS certificate changes is advised, as the infrastructure could be repurposed. Incident response teams should also update endpoint protection signatures to reflect the low Gridinsoft trust score and the observed kit fingerprint. Users should be warned against providing MetaMask seed phrases to any site presenting the "MetaMask Help Center" title.
Data Coverage
Pipeline di risposta alle minacce
Copertura delle blocklist
10 fonti esterne monitorate · snapshot del 12/08/2026
10 fonti esterne monitorate Nessuna corrispondenza
Cronologia del rilevamento
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
-
Stato del dominio
Raggiungibile → Non raggiungibile
-
Cloudflare Radar
Scansione Cloudflare Radar archiviata · Apri scansione
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, nomi TLS e date
ICANN OVERSIGHT
Registration: daftpage.com
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain daftpage.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of secure-metamask-log.daftpage.com · checked Mar 26, 2026
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo