metamask-miniapp[.]cc

The domain metamask-miniapp.cc was registered on June 18, 2026 through Internet Domain Service BS Corp. and is presently taken offline. Technical profiling shows it resolved to the IP address 101.99.91.179, which belongs to AS45839 Shinjiru Technology Sdn Bhd in Malaysia. The authoritative nameservers are ns1.cloud-zero.net and ns2.cloud-zero.net, and the site presented a Let’s Encrypt certificate (issuer YE1) matching the domain name. The page title returned by the server is "MetaMask", confirming the intended brand impersonation.

The domain is listed on three public blocklists and has been actively blocked by PhishDestroy, the official MetaMask takedown effort, and SEAL. VirusTotal analysis recorded four detections out of ninety‑one scanning engines, indicating partial consensus among security vendors that the site is malicious. A Gridinsoft trust score of 0 / 100 further underscores a lack of credibility. The threat is classified as a brand‑impersonation campaign targeting MetaMask users, and the risk level is elevated.

While the offline status limits immediate live‑traffic observation, defenders should continue to enforce deny‑list rules for the domain and its associated IP range, monitor any emergence of similar sub‑domains under the same registrar or hosting provider, and watch for reuse of the Let’s Encrypt certificate fingerprint. Updating intrusion‑detection signatures to flag the exact page title and nameserver pair will help catch future replicas. Given the confirmed blocklist presence and vendor detections, proactive network‑level blocking and endpoint alerts are recommended to prevent credential harvesting attempts against MetaMask users.