ScanMalware.com

Security Scan Report: login-metemask-io.pages.dev

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7cc6cca4-cd0f-49f5-a9fc-c6689907d8aaDomain and IP registration (RDAP)/api/v1/rdap/7cc6cca4-cd0f-49f5-a9fc-c6689907d8aaHow often this domain was scanned/api/v1/domain/stats/login-metemask-io.pages.devScan history for this domain/api/v1/domain/history/login-metemask-io.pages.dev?limit=15
This website contacted 1 IP in 1 country across 1 domain to perform 2 HTTP transactions. The main domain is pages.dev and was registered 6 years ago.

Submitted URL: https://login-metemask-io.pages.dev/

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Unauthorized MetaMask login page on a typosquatted pages.dev subdomain imitating login.metamask.io. No form captured yet, but it is brand impersonation of a crypto wallet brand — never enter a seed phrase or password here.

Risk Factors (4)
Impersonation of a different entity's brand (MetaMask) on a non-official, unranked domain
Deceptive hostname crafted to resemble login.metamask.io
Free hosting-platform subdomain (pages.dev) with unknown, unattributable creation date
Page advertises 'sign in' for a crypto wallet without any connection to the brand owner
Domain age information unavailable

Details

Page Title

MetaMask Login – Manage Ethereum & Web3

Scan Type

public

Domain Name Analysis

You're looking at domain 'login-metemask-io.pages.dev' on the developer-focused generic top-level domain (.dev), featuring subdomain 'login-metemask-io'. Count 5 characters in 'pages' containing 2 vowels alongside three consonants. Splitting it apart reveals one word: pages. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://login-metemask-io.pages.dev/

Page Load Overview

0.73s
Total Load Time
1 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:45%
Script:Latin
Direction:ltr

Detection Details

Text Length:39 chars
Detector Agreement:67%

Website Classification

Primary Category

unknown0% confidence
Type: static
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
21--

Detected Technologies3

HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B0D0A76A4750144DFB2459A41DA122402B75EE55A5818C2828D9D41AC75E3EBDF12182

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6:qzxUm8Le4ydWAkh6MxRwiZLfz+M7/hk2TCNoEMNhr65:kxp8LeFdWRWWfz1T6o25

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:1:0:9efcf9028b7ffa3140b9deb3c4eb7d04

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data