metamask--login[.]framer[.]ai

This domain, metamask--login.framer.ai, displayed a page title of "Site Not Found | Framer" and is categorized as a cryptocurrency scam that impersonates the MetaMask brand. The threat posed is a phishing attack designed to deceive users into believing they are accessing a legitimate MetaMask login portal, potentially leading to credential theft or cryptocurrency wallet compromise.

Technical analysis reveals the domain is flagged by 8 out of 95 VirusTotal vendors, with detections from ChainPatrol, alphaMountain.ai, CyRadar, Fortinet, and Google Safebrowsing. It is listed on 1 blocklist. The domain was registered on 2018-01-06 through CSC Corporate Domains, Inc., and resolves to IP address 52.223.52.2 in the United States, hosted on AS16509 (Amazon.com, Inc.). The site uses a Let's Encrypt SSL certificate with fingerprint E8, and its nameservers are ns-114.awsdns-14.com, ns-1198.awsdns-21.org, ns-1902.awsdns-45.co.uk, and ns-635.awsdns.

Currently, the site is reported as DOWN/OFFLINE, indicating it is not accessible. Based on the available data, the risk level is high due to confirmed impersonation of a well-known cryptocurrency brand and multiple security vendor flags, though the immediate threat is mitigated by its offline status. Users should avoid any interaction with this domain.