divace-web-metamask[.]framer[.]ai

The domain divace-web-metamask.framer.ai is flagged for brand impersonation, posing a significant threat to users of the MetaMask cryptocurrency wallet. This domain attempts to deceive users into believing they are accessing a legitimate MetaMask login page, potentially leading to credential theft and unauthorized access to wallet funds.

Analysis indicates that this domain has been identified by 9 out of 95 security vendors on VirusTotal, reflecting a notable level of suspicion. The domain was registered through CSC Corporate Domains, Inc. on January 06, 2018, and has appeared on 1 security blocklist. The IP address 35.71.142.77, associated with AS16509 Amazon.com, Inc., has been used to host this deceptive page. Google Safe Browsing also flags this domain for phishing activities, and it is currently blocked by PhishDestroy. The SSL certificate was issued by Let's Encrypt, which, while legitimate, does not guarantee the site's safety.

If users have visited divace-web-metamask.framer.ai, they should immediately check their MetaMask account for any unauthorized activity. It is recommended to change the passwords and enable two-factor authentication (2FA) if not already in place. Additionally, users should monitor their transaction history and report any suspicious activities to MetaMask's support team. Security experts advise exercising caution and verifying the legitimacy of URLs before entering sensitive information.