ss-s[.]cc

This domain, ss-s.cc, is flagged for brand impersonation targeting MetaMask, a cryptocurrency wallet service. Infrastructure analysis reveals a credential harvesting operation designed to mimic the legitimate MetaMask login interface, as indicated by the page title 'Log In.' The domain was created to deceive users into submitting sensitive wallet credentials, potentially leading to unauthorized access and asset theft. Technical indicators confirm the domain's malicious infrastructure. It was registered on December 04, 2024, through NameSilo, LLC, and resolves to the IP address 172.67.190.156. The domain is currently detected on 3 security blocklists, though VirusTotal reports 0/95 detections, suggesting limited initial visibility. Additional indicators include the use of Cloudflare hosting, Google Trust Services SSL certification, and HTTP/3 protocol support, which may be leveraged to evade detection or enhance performance. As of the latest assessment, ss-s.cc has been taken offline, reducing immediate exposure risk. However, historical data suggests the infrastructure could be reactivated or repurposed. Users who interacted with the domain are advised to revoke any active sessions, rotate credentials, and monitor wallet activity for unauthorized transactions. Organizations should update blocklists to include this domain and its associated IP to prevent future access attempts.