metasafe[.]ai
“Metasafe - Crypto Wallet AML Risk Analysis”
metasafe.ai — Não verificado. Representação da marca: Across; Tipo de golpe: Seed Phrase Theft. Resumo das evidências: VirusTotal 2/95 (ADMINUSLabs, Fortinet); PhishDestroy score 65/100. Registrador: NameCheap.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
The domain metasafe.ai has been identified as a brand impersonation threat specifically targeting users of the Across Protocol, a cross-chain bridging platform. Analysis indicates this domain was designed to deceive visitors by presenting itself as a legitimate cryptocurrency wallet risk analysis tool, with the page title 'Metasafe - Crypto Wallet AML Risk Analysis.' As of the latest verification, the domain has been taken offline, though prior activity remains a concern for potential victims. Infrastructure analysis reveals the domain was registered through NameCheap, Inc. on February 07, 2025, and resolved to the IP address 188.114.96.3. Security vendor detections on VirusTotal indicate that 11 out of 95 vendors flagged this domain as malicious. The domain appears on one security blocklist and was actively blocked by PhishDestroy. Additional technical indicators include the use of Cloudflare for hosting, Proton Mail for communication, and Webflow for site development. The SSL certificate is issued by Google Trust Services, and the site supported HTTP/3. Gridinsoft assigned a trust score of 0/100, further confirming its malicious nature. Given the domain's current offline status, the immediate threat to new visitors is mitigated. However, organizations and individuals should remain vigilant for similar impersonation attempts, particularly those targeting cryptocurrency users. It is recommended to block the domain and its associated IP address (188.114.96.3) at the network level. Users who may have interacted with this domain should monitor their cryptocurrency wallets for unauthorized transactions and consider revoking any connected smart contract approvals. Security teams are advised to update detection rules to include this domain and its indicators of compromise in threat intelligence feeds.
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 4 identified
Webflow is Software-as-a-Service (SaaS) for website building and hosting.
webflow.com 100% de confiançaProton Mail is the world’s largest secure email service with over 70 million users. Available on Web, iOS, Android, and desktop. Protected by Swiss privacy law.
proton.me 100% de confiançaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% de confiançaHTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 100% de confiançaAnálise do VirusTotal
Evidências arquivadas
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of metasafe.ai · checked Jun 27, 2026
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo