metamask-wagmi-demo[.]vercel[.]app

This domain, metamask-wagmi-demo.vercel.app, poses a high-risk threat of brand impersonation, specifically targeting MetaMask users. The domain impersonates MetaMask by using a deceptive name and page title, 'MetaMask SDK Quickstart,' which may mislead users into believing it is an official MetaMask resource. If accessed, the site could potentially lead to credential theft or other malicious activities designed to exploit user trust.

Infrastructure analysis reveals that the domain was created on February 23, 2026, and is currently active. It has been flagged by 8 out of 95 security vendors on VirusTotal, indicating a moderate level of suspicion among the security community. The domain is registered through Tucows Domains Inc. and resolves to the IP address 216.198.79.67, which is located in the United States and is associated with AS16509, Amazon.com, Inc. Additionally, this domain appears on 2 security blocklists, PhishDestroy and PhishingDB, further confirming its malicious nature.

Users who have visited metamask-wagmi-demo.vercel.app should immediately check their MetaMask accounts for any unauthorized activity and change their passwords. They are advised to use two-factor authentication (2FA) to enhance account security. If any credentials were entered on the site, users should also monitor their financial accounts and report any suspicious transactions to their financial institutions and MetaMask support.