metamaskbroavwser[.]gitbook[.]io
“Metamask® Chrome® Extension® - Getting started with MetaMask | us”
Deteksi tersimpan
Peringatan penyamaran
- Jenis penyamaran
content_divergence- Skor penyamaran
- 1/6
Ringkasan bukti
The domain metamaskbroavwser.gitbook.io is flagged as an active brand‑impersonation infrastructure targeting MetaMask. Registration occurred on 23 April 2026 via Cloudflare, Inc., and the domain resolves to IP 104.18.40.47, a Cloudflare address located in CA. DNS is served by dahlia.ns.cloudflare.com and hugh.ns.cloudflare.com. The site is hosted on the GitBook platform, utilizes Google Cloud services, and presents a TLS certificate issued by Google Trust Services (WE1). HTTP responses return a 307 redirect and the service advertises HSTS, HTTP/3, and Cloudflare tracing features. The page title captured is “Metamask® Chrome® Extension® - Getting started with MetaMask | us,” indicating an attempt to mimic official MetaMask documentation. Security telemetry shows a Gridinsoft trust score of 0 / 100 and 18 of 94 VirusTotal scanners flag the domain as malicious. It is listed on three external blocklists and has been blocked by PhishDestroy, MetaMask, and SEAL. While the exact page content has not been examined, the combination of brand‑specific title, high‑risk classification, and multiple detections supports a high‑confidence judgment of malicious intent. Defenders should block the domain at network perimeter, add it to threat‑intel feeds, and monitor for related C&C patterns. Further investigation of the redirected endpoint is recommended to confirm any credential‑harvesting functionality.
Data Coverage
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | metamaskbroavwser.gitbook.io |
malicious | Sinkholed |
| DNS4EU | metamaskbroavwser.gitbook.io |
malicious | Sinkholed |
| DigiCert UltraDNS | metamaskbroavwser.gitbook.io |
malicious | Sinkholed |
| Quad9 DNS | metamaskbroavwser.gitbook.io |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Cakupan daftar blokir
10 sumber eksternal dipantau · snapshot tersimpan 11/08/2026
8 sumber eksternal dipantau Tidak cocok
Teknologi
7 teknologi dengan keyakinan tinggi teridentifikasi
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of metamaskbroavwser.gitbook.io · checked Apr 23, 2026
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive