metamask-chrome-extensi-on[.]pages[.]dev

This domain, metamask-chrome-extensi-on.pages.dev, poses a specific threat of brand impersonation, targeting the MetaMask cryptocurrency wallet. The site is designed to deceive users into believing it is an official MetaMask resource, potentially leading to the compromise of sensitive information or financial loss.

Analysis indicates that the domain is flagged by 10 out of 95 security vendors on VirusTotal, suggesting a moderate level of suspicion among the cybersecurity community. The domain is registered through Cloudflare, Inc., and was created on September 5, 2025. Additionally, the domain appears on one known security blocklist, further corroborating its malicious intent. The SSL certificate is issued by Google Trust Services / WE1, which might lend a false sense of security to unsuspecting users. The current status of the domain is offline, and its IP address resolves to 104.21.80.1.

Users who have visited this site are advised to immediately change their MetaMask login credentials and monitor their accounts for any unauthorized activity. It is also recommended to run a full system scan using up-to-date antivirus software to ensure that no malware was installed during the visit. To avoid similar threats, users should always verify the URL of the MetaMask website and use official channels for updates and support.