Phishing detection: ai-metamask-restored.netlify.app
MetaMask Screenshot
Investigate
Domain
ai-metamask-restored.netlify.app0 CT hosts on apex
urlscan
VirusTotal
Whois
IP
63.176.8.218
ipinfo
Greynoise
URL
http://ai-metamask-restored.netlify.app
Phishunt analysis Beta
37
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +5.1 Site cluster
- +4.5 Brand in title
- +4.1 Brand in screenshot
- +3.0 OpenPhish
- +2.3 Cert reuse
- +2.0 Young domain
- +1.1 ASN reputation
- +1.1 No CSP header
- +0.6 Long domain
- +0.6 Cross-origin form
- +0.6 Suspicious TLD
- +0.2 Hyphens
- +0.2 External scripts
- +0.1 Deep subdomain
20 signals fired · detector v3.0.0
AI analysis AIBeta
Crypto scam
Netlify-hosted page named as a restored MetaMask wallet impersonates MetaMask, likely to steal wallet seed phrases or credentials. It is flagged by Google Safe Browsing as social engineering and by OpenPhish.
Google Safe BrowsingOpenPhishBrand in title
AI-generated from stored detector signals - the AI never visited the site. · 2026-11-13 · confidence 85%
Domain & Network
Whois
Registrar
Name.com, Inc.
Network
IP
63.176.8.218 AWS EC2
Country
Germany
Germany
Hosting
Amazon.com, Inc.
ASN
AS16509
GSB category: SOCIAL_ENGINEERING
CleanPhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Network / ASN
Amazon.com, Inc.
Submit to blocklists