chorme-metamask-io-extension[.]pages[.]dev

This report analyzes the domain chorme-metamask-io-extension.pages.dev, identified as a suspected phishing site by Cloudflare based on its page title. The site impersonates the MetaMask brand and is classified as a cryptocurrency scam. The threat posed is social engineering, designed to trick users into revealing sensitive cryptocurrency wallet credentials or private keys by masquerading as a legitimate MetaMask extension.

Technical evidence from the provided data confirms the malicious nature of this domain. VirusTotal analysis shows 16 out of 95 security vendors flagged the site as malicious. The domain is registered with Cloudflare, Inc. and was created on 2025-10-09. It resolves to IP address 188.114.96.3, located in the United States, and is hosted on AS13335 (Cloudflare, Inc.). The SSL certificate is issued by Google Trust Services (WE1). Google Safe Browsing has flagged the site for social engineering. Blocklists report 1 listing, and the DOM risk score is 88 out of 100, with GridinSoft trust rated at 0 out of 100.

The domain is currently offline. Despite its inactive status, the site poses a high risk due to its confirmed impersonation of MetaMask, multiple security vendor detections, and high risk score. Users should avoid any interaction with this domain.