mtmskchrcmxtnsion[.]gitbook[.]io
“Metamask® Chrome® Extension® | Getting started with MetaMask”
证据摘要
Domain mtmskchrcmxtnsion.gitbook.io is an active brand impersonation threat targeting MetaMask users. The site presents itself as a legitimate MetaMask Chrome extension page, using the title 'Metamask® Chrome® Extension® | Getting started with MetaMask' to deceive visitors. This domain is currently active and poses a high risk of credential theft or cryptocurrency drainer deployment.
Infrastructure analysis reveals that the domain was created on March 30, 2014, and is registered through Cloudflare, Inc. It resolves to IP address 104.18.40.47 and employs technologies including GitBook, Google Cloud, HSTS, Google Cloud Trace, Cloudflare, HTTP/3, and Google Cloud Storage. The SSL certificate is issued by Google Trust Services. VirusTotal detection shows 6 of 95 security vendors flagging this domain as malicious. The domain is currently active and accessible.
Risk assessment is high due to the combination of brand impersonation, active status, and the use of legitimate hosting services (GitBook, Google Cloud) that may bypass basic security filters. Users are advised to avoid visiting this domain, never enter MetaMask credentials or seed phrases on this site, and report it to relevant security teams. Organizations should block the domain at the network level and monitor for related infrastructure using the unique seed 696fae.
Data Coverage
网络安全情报
威胁响应 Pipeline
阻止列表覆盖
监控中的外部数据源 10 个 · 已存快照 2026年8月12日
检测时间线
-
VirusTotal
None → 6
技术
识别出 7 项高置信度技术
VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of mtmskchrcmxtnsion.gitbook.io · checked Jul 9, 2026
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。
检查任意域名
使用存储的阻止列表、WHOIS、DNS 和公共扫描证据进行威胁分析
立即扫描举报网络钓鱼
将可疑域名提交至我们的威胁数据库——保护社区
报告实时威胁动态
最近的网络钓鱼报告和观察到的可用性变化
监控