io-metamasklogin[.]framer[.]media

The domain io-metamasklogin.framer.media is identified as a brand impersonation threat targeting the MetaMask cryptocurrency wallet. The domain is currently offline.

Analysis indicates that the domain was flagged by 9 of 95 VirusTotal vendors, suggesting a moderate level of detection. The domain was registered through CSC Corporate Domains, Inc. and resolves to the IP address 35.71.142.77, which is located in the United States and associated with AS16509 Amazon.com, Inc. The domain was created on November 19, 2021, and has appeared on 1 security blocklist. The page title discovered was 'MetaMask Login: Effortless and Secure Crypto Access,' which is designed to deceive users into believing they are interacting with a legitimate MetaMask service.

The domain is currently taken offline, but it is recommended that organizations continue to monitor for any signs of reactivation. Users should be educated to verify the authenticity of MetaMask login pages and only access the official MetaMask website or use verified MetaMask applications. Additionally, network administrators should consider implementing DNS filtering and web protection policies to block access to known malicious domains.