metamask-dapps[.]com

This domain, metamask-dapps.com, is confirmed as a crypto scam impersonating MetaMask, a well-known cryptocurrency wallet service. Registered on November 20, 2025, through Dynadot LLC, the domain resolves to IP 188.114.96.3, hosted on Cloudflare infrastructure (AS13335). The SSL certificate is issued by Google Trust Services, a common but not inherently trustworthy indicator. The domain's HTTP status is 403 (Forbidden), suggesting either takedown efforts or restrictive access controls, and it is currently offline. Analysis of its infrastructure reveals Cloudflare nameservers (cameron.ns.cloudflare.com, miki.ns.cloudflare.com) and HTTP/3 protocol usage, typical of modern phishing setups leveraging CDN services for resilience.

The page title 'web3.0' aligns with cryptocurrency-related scams, though no further content analysis is available. The domain appears on one security blocklist (PhishDestroy) and is flagged by 8 of 95 security vendors on VirusTotal, indicating moderate detection coverage. AlienVault OTX records the domain in five threat intelligence pulses, reinforcing its malicious classification. While the exact scam mechanics remain unconfirmed due to the site's offline status, the combination of MetaMask impersonation, crypto-themed branding, and detection by multiple security sources confirms its fraudulent intent. Defenders should treat this domain as a confirmed threat.

Blocklist the domain and its resolving IP (188.114.96.3) at firewall and proxy levels. Monitor for related domains registered through Dynadot or using Cloudflare infrastructure, particularly those with 'metamask' or 'dapps' in their names. Given the domain's offline status, further investigation into its historical activity or associated campaigns may require querying threat intelligence platforms like AlienVault OTX or VirusTotal for additional indicators.