# metmask-chrome-extension.free.site.pro — MALICIOUS

> metmask-chrome-extension.free.site.pro is a medium-risk phishing domain now offline. Stay vigilant and avoid this site to protect your credentials.

## Summary
PhishDestroy identifies metmask-chrome-extension.free.site.pro as a generic phishing domain designed to impersonate legitimate cryptocurrency tools. Classified under medium risk due to its targeted approach, the domain aimed to deceive users seeking Chrome extensions for MetaMask, a popular crypto wallet. The fraudulent intent focused on harvesting sensitive information through fake interfaces.

Technical analysis reveals the domain was registered on February 21, 2026, through a dead domain registrar, raising suspicion about its legitimacy. It appeared on three separate security blocklists and was flagged by 7 out of 95 VirusTotal security vendors, indicating a moderately confirmed malicious nature. The domain’s infrastructure was minimal, using free hosting services, which is common in short-lived phishing setups to avoid detection and takedown delays.

Currently, the domain is offline and inaccessible, likely due to takedown actions following community and security vendor reports. Despite its offline status, users should remain cautious of similar phishing attempts exploiting crypto extension themes. PhishDestroy recommends avoiding interaction with suspicious URLs resembling metmask-chrome-extension.free.site.pro and keeping security software updated to prevent credential theft.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: MetaMask Chrome Extension : Gateway to Blockchain Apps

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- IP: 104.199.204.141
- IP Country: TW
- IP City: Taipei
- IP Org: AS396982 Google LLC
- SSL Issuer: E6

## Detection Status
- VirusTotal: 7 vendors flagged
  Vendors: ["ADMINUSLabs", "ChainPatrol", "alphaMountain.ai", "CRDF", "CyRadar", "Fortinet", "Webroot"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/0198b5be-2983-77dd-b708-c7b083ce9af7.png
- PhishDestroy: https://phishdestroy.io/domain/metmask-chrome-extension.free.site.pro/
- LLM endpoint: https://phishdestroy.io/domain/metmask-chrome-extension.free.site.pro/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/metmask-chrome-extension.free.site.pro/
Last updated: 2026-03-18