Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@vh-global.net.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
h5[.]metamask[.]eu[.]cc
“MetaMask”
h5.metamask.eu.cc — 未验证. 品牌冒充:MetaMask; 诈骗类型:Brand Impersonation. 证据摘要: VirusTotal 19/91 (ADMINUSLabs, ChainPatrol, Criminal IP, alphaMountain.ai, BitDefender); URLQuery 5 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; PhishDestroy score 95/100. 注册商: Gname.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
PhishDestroy identifies h5.metamask.eu.cc as an active brand impersonation scam targeting MetaMask users. This domain is designed to deceive visitors into surrendering sensitive wallet credentials or downloading malicious software under the guise of MetaMask services.
This domain was flagged by 4 of 95 VirusTotal vendors, registered through Gname.com Pte. Ltd., and resolves to IP 103.30.76.121. Created in 1997, it has appeared on 2 security blocklists and holds low trust scores despite using a Let’s Encrypt SSL certificate. The domain is explicitly blocked by MetaMask and SEAL for MetaMask impersonation.
As of today, h5.metamask.eu.cc remains active and poses an elevated risk. Users are strongly advised to avoid interacting with this domain or any linked pages. Always verify URLs and use official MetaMask channels for downloads and support. Report any encounters to MetaMask’s fraud team immediately.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | h5.metamask.eu.cc |
malicious | Sinkholed |
| Quad9 DNS | h5.metamask.eu.cc |
malicious | Sinkholed |
| DNS4EU | h5.metamask.eu.cc |
malicious | Sinkholed |
| Hagezi Threat Feed | ws.metamask.eu.cc |
malicious | Sinkholed |
| DNS4EU | ws.metamask.eu.cc |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 3 identified
Progressive JavaScript framework for building user interfaces.
High-performance HTTP server and reverse proxy, known for stability and low resource usage.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of h5.metamask.eu.cc · checked Mar 26, 2026
证据与外部报告
PD-20260326-308E72 Recipient: abuse@vh-global.net 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。