meta-compliance[.]com

Analysis of the domain meta-compliance.com indicates active brand impersonation targeting MetaMask, a cryptocurrency wallet service. The domain was registered on June 30, 2025, through Ultahost, Inc., and currently resolves to the IP address 216.198.79.193, hosted by Vercel, Inc. in the United States. The page title, 'MetaMask | Compliance Check,' explicitly suggests an attempt to deceive users into engaging with a fraudulent compliance verification process, aligning with the reported scam type of crypto fraud. Infrastructure analysis reveals the use of Cloudflare nameservers (garrett.ns.cloudflare.com and ivy.ns.cloudflare.com) and an SSL certificate issued by Let's Encrypt, which are common among both legitimate and malicious domains. The domain is flagged by 25 of 91 security vendors on VirusTotal, and it appears on three security blocklists, including PhishDestroy, MetaMask's own blocklist, and SEAL. The Gridinsoft trust score for this domain is 0 out of 100, further corroborating its malicious classification. The domain remains active as of July 12, 2026, returning an HTTP 200 status code, which confirms its operational status. Technologies detected include Vercel and HSTS, though these are not inherently indicative of malicious activity. Defenders should prioritize blocking this domain at the network and endpoint levels, particularly within environments where cryptocurrency-related services are accessed. Additional monitoring of domains registered through the same registrar or resolving to the same IP range may reveal related malicious infrastructure. The exact content and functionality of the site have not been analyzed, but the available evidence strongly supports its classification as a high-risk crypto scam.