dash-metamask-io[.]pages[.]dev

The domain dash-metamask-io.pages.dev is a high-risk brand impersonation site targeting MetaMask, a popular cryptocurrency wallet. As of the latest assessment, the domain is currently offline. This domain has been identified as a potential threat to users who may be misled into believing it is an official MetaMask site.

Analysis indicates that dash-metamask-io.pages.dev was flagged by 13 of 95 VirusTotal vendors, suggesting a significant level of suspicion among security professionals. The domain is registered through Cloudflare, Inc., and resolves to the IP address 172.66.47.198, which is located in the United States under the AS13335 Cloudflare, Inc. network. The SSL certificate is issued by Google Trust Services / WE1. The domain was created on September 10, 2025, and has been listed on at least one security blocklist. Google Safe Browsing also flags this domain for phishing activity, further corroborating the threat assessment.

Given the current status of the domain as offline and the multiple red flags, it is recommended that users avoid visiting this site. Organizations and individuals should update their security filters and blocklists to include this domain. Additionally, the infrastructure analysis reveals a pattern consistent with other brand impersonation attacks, suggesting that the domain may have been part of a broader campaign. Ongoing monitoring for any reactivation of this domain or similar patterns is advised.