MetaMask
Registered lookalikes
Spellings of metamask.io registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.
Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.
85 of the 218 are listed by a source or resolve to a listed address, checked hourly.
- metamask-support.online SG · AS63949 · Akamai Connected Cloud8 addressesLookalike of metamask.io · the name with the word “support”PhishDestroy CommunitySuspicious · mediumParking page · Shared parking page
DetailsHide details for metamask-support.online
- Domain
- metamask-support.online
- Spelling
- The name of metamask.io with the word “support”
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-08-22 · GMO Internet Group, Inc. d/b/a Onamae.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)2600:3c03::f03c:95ff:fe00:29ca2600:3c03::f03c:95ff:fe91:5d522600:3c03::f03c:95ff:feed:4d4f2600:3c03::f03c:95ff:feed:cf2a
- Parking page · Shared parking page
- Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.express US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · the ending .expressCloudflare
DetailsHide details for metamask.express
- Domain
- metamask.express
- Spelling
- The name of metamask.io with the ending .express
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-19 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Addresses
- 104.21.89.112 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.140.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:59702606:4700:3035::ac43:8cf9
- Cloudflare
- Cloudflare (104.21.89.112, 172.67.140.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaask.pro US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterRegistry lookup queuedAmazon Web Services
DetailsHide details for metaask.pro
- Domain
- metaask.pro
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-08-17 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaask.app US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterRegistry lookup queuedAmazon Web Services
DetailsHide details for metaask.app
- Domain
- metaask.app
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-17 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaask.biz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterAmazon Web Services
DetailsHide details for metaask.biz
- Domain
- metaask.biz
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-17 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaask.info US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterRegistry lookup queuedAmazon Web Services
DetailsHide details for metaask.info
- Domain
- metaask.info
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-17 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaask.org US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterRegistry lookup queuedAmazon Web Services
DetailsHide details for metaask.org
- Domain
- metaask.org
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-17 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamsk.agencyLookalike of metamask.io · a dropped letterMX present
DetailsHide details for metamsk.agency
- Domain
- metamsk.agency
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-11-01 · the day we first found it in the .agency zone file, already registered
- Registered
- 2026-08-05 · Tucows Domains Inc.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamsak.co US · AS396982 · Google LLCLookalike of metamask.io · two letters swappedGoogle Cloud
DetailsHide details for metamsak.co
- Domain
- metamsak.co
- Spelling
- Spelled like metamask.io with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-28 · Gname.com Pte. Ltd.
- Addresses
- 34.130.222.18 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)
- Google Cloud
- Google Cloud (34.130.222.18): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamas.xyz TR · AS34619 · CIZGI CIZGI TELEKOMUNIKASYO…Lookalike of metamask.io · a dropped letter
DetailsHide details for metamas.xyz
- Domain
- metamas.xyz
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-25 · Nics Telekomunikasyon A.S.
- Addresses
- 85.159.66.93 · Türkiye · AS34619 CIZGI CIZGI TELEKOMUNIKASYON ANONIM SIRKETI
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasksupport.tech DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Lookalike of metamask.io · the name with an added wordPhishDestroy CommunitySuspicious · mediumParking page · ParkingCrew (Team Internet)
DetailsHide details for metamasksupport.tech
- Domain
- metamasksupport.tech
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .tech zone file, already registered
- Registered
- 2026-07-21 · Hosting Concepts B.V. d/b/a Registrar.eu
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.tw US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · the ending .twPhishDestroy CommunitySuspicious · highCloudflare
DetailsHide details for metamask.tw
- Domain
- metamask.tw
- Spelling
- The name of metamask.io with the ending .tw
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-07-14 · Name.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.21.34.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.158.226 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:22622606:4700:3037::ac43:9ee2
- Cloudflare
- Cloudflare (104.21.34.98, 172.67.158.226): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- meetamask.com US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · a doubled letterCloudflare
DetailsHide details for meetamask.com
- Domain
- meetamask.com
- Spelling
- Spelled like metamask.io with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-06-10 · Cloudflare, Inc.
- Addresses
- 104.21.9.56 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.159.32 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:9382606:4700:3037::ac43:9f20
- Cloudflare
- Cloudflare (104.21.9.56, 172.67.159.32): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskhelp.center US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the name with an added wordAmazon Web Services
DetailsHide details for metamaskhelp.center
- Domain
- metamaskhelp.center
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .center zone file, already registered
- Registered
- 2026-05-30 · HOSTINGER operations, UAB
- Addresses
- 75.2.60.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)99.83.190.102 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (75.2.60.5, 99.83.190.102): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metanask.live HK · AS135097 · LUOGELANG (FRANCE) LIMITEDLookalike of metamask.io · a letter from a neighbouring keyRegistry lookup queued
DetailsHide details for metanask.live
- Domain
- metanask.live
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-05-29 · GoDaddy.com, LLC
- Addresses
- 156.241.123.166 · Hong Kong · AS135097 MYCLOUD-AS-AP - LUOGELANG (FRANCE) LIMITED
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.finance US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .financeParking page · Afternic
DetailsHide details for metamask.finance
- Domain
- metamask.finance
- Spelling
- The name of metamask.io with the ending .finance
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-05-14 · DropCatch.com 482 LLC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamask.finance to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.com.cmLookalike of metamask.io · the ending .com.cmNo address or mail server yet
DetailsHide details for metamask.com.cm
- Domain
- metamask.com.cm
- Spelling
- The name of metamask.io with the ending .com.cm
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-05-07 · Netcom.cm Sarl
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskservice.cyou US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the name with an added wordAmazon Web Services
DetailsHide details for metamaskservice.cyou
- Domain
- metamaskservice.cyou
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .cyou zone file, already registered
- Registered
- 2026-04-25 · Spaceship, Inc.
- Addresses
- 34.216.117.25 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)54.149.79.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (34.216.117.25, 54.149.79.189): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaske.help DE · AS47846 · SEDO-AS SEDO GmbHLookalike of metamask.io · an added characterPhishDestroy CommunitySuspicious · mediumParking page · SedoMX present
DetailsHide details for metamaske.help
- Domain
- metamaske.help
- Spelling
- Spelled like metamask.io with an added character
- First found
- 2026-11-01 · the day we first found it in the .help zone file, already registered
- Registered
- 2026-04-21 · NameSilo, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- MX
- mx1.privateemail.commx2.privateemail.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasksupport.online VG · AS40034 · Confluence Networks IncLookalike of metamask.io · the name with an added wordPhishDestroy CommunitySuspicious · mediumParking page · Confluence Networks
DetailsHide details for metamasksupport.online
- Domain
- metamasksupport.online
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-04-20 · Network Solutions, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 208.91.197.27 · British Virgin Islands · AS40034 CONFLUENCE-NETWORK-INC - Confluence Networks Inc · Confluence Networks (parking page)
- Parking page · Confluence Networks
- Confluence Networks (208.91.197.27): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metalmask.store US · AS13335 · Cloudflare, Inc.2 addressesLookalike of metamask.io · an added characterCloudflare
DetailsHide details for metalmask.store
- Domain
- metalmask.store
- Spelling
- Spelled like metamask.io with an added character
- First found
- 2026-11-01 · the day we first found it in the .store zone file, already registered
- Registered
- 2026-04-15 · Tucows Domains Inc.
- Addresses
- 23.227.38.73 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2620:127:f00f:d::
- Cloudflare
- Cloudflare (23.227.38.73): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metarnask.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · similar-looking charactersParking page · Afternic
DetailsHide details for metarnask.com
- Domain
- metarnask.com
- Spelling
- Spelled like metamask.io with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-04-12 · DropCatch.com 698 LLC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metarnask.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.bot US · AS14618 · Amazon.com, Inc.Lookalike of metamask.io · the ending .botPhishDestroy CommunitySuspicious · mediumParking page · Atom
DetailsHide details for metamask.bot
- Domain
- metamask.bot
- Spelling
- The name of metamask.io with the ending .bot
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-04-10 · Dynadot, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 52.20.84.62 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Atom (parking page)
- Parking page · Atom
- The registry delegates metamask.bot to Atom’s nameservers, which answer for it. Atom (52.20.84.62): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasks.siteLookalike of metamask.io · an added characterPhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for metamasks.site
- Domain
- metamasks.site
- Spelling
- Spelled like metamask.io with an added character
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2026-04-03 · HOSTINGER operations, UAB
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- MX
- route2.mx.cloudflare.netroute3.mx.cloudflare.netroute1.mx.cloudflare.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskcard.onlineLookalike of metamask.io · the name with an added wordNo address or mail server yet
DetailsHide details for metamaskcard.online
- Domain
- metamaskcard.online
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-04-02 · NameSilo, LLC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.booLookalike of metamask.io · the ending .booNo address or mail server yet
DetailsHide details for metamask.boo
- Domain
- metamask.boo
- Spelling
- The name of metamask.io with the ending .boo
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-04-01 · Name.com, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.llc DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Lookalike of metamask.io · the ending .llcPhishDestroy CommunitySuspicious · mediumParking page · ParkingCrew (Team Internet)
DetailsHide details for metamask.llc
- Domain
- metamask.llc
- Spelling
- The name of metamask.io with the ending .llc
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-03-25 · Dynadot Inc
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 185.53.179.128 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.128): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.contact UA · AS200000 · Ukraine-AS Hosting Ukraine …Lookalike of metamask.io · the ending .contactMX present
DetailsHide details for metamask.contact
- Domain
- metamask.contact
- Spelling
- The name of metamask.io with the ending .contact
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-03-18 · Hosting Ukraine LLC
- Addresses
- 91.206.200.82 · Ukraine · AS200000 Ukraine-AS Hosting Ukraine LTD
- MX
- mx.services
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskhelp.orgLookalike of metamask.io · the name with an added wordNo address or mail server yet
DetailsHide details for metamaskhelp.org
- Domain
- metamaskhelp.org
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-03-05 · PDR Ltd. d/b/a PublicDomainRegistry.com
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask2fa.infoLookalike of metamask.io · the name with an added wordPhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for metamask2fa.info
- Domain
- metamask2fa.info
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2026-03-03 · GNAME.COM PTE. LTD.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasksupport.fun DE · AS47846 · SEDO-AS SEDO GmbHLookalike of metamask.io · the name with an added wordPhishDestroy CommunitySuspicious · mediumParking page · Sedo
DetailsHide details for metamasksupport.fun
- Domain
- metamasksupport.fun
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .fun zone file, already registered
- Registered
- 2026-03-02 · WEDOS Internet, a.s.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 64.190.63.222 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- The registry delegates metamasksupport.fun to Sedo’s nameservers, which answer for it. Sedo (64.190.63.222): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskcard.infoLookalike of metamask.io · the name with an added wordPhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for metamaskcard.info
- Domain
- metamaskcard.info
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2026-02-26 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.locker US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · the ending .lockerCloudflare
DetailsHide details for metamask.locker
- Domain
- metamask.locker
- Spelling
- The name of metamask.io with the ending .locker
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-02-26 · Dynadot, LLC
- Addresses
- 104.21.89.176 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.162.180 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::6815:59b02606:4700:3037::ac43:a2b4
- Cloudflare
- Cloudflare (104.21.89.176, 172.67.162.180): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.rocks US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · the ending .rocksCloudflare
DetailsHide details for metamask.rocks
- Domain
- metamask.rocks
- Spelling
- The name of metamask.io with the ending .rocks
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-02-25 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Addresses
- 104.21.66.39 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.155.249 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:42272606:4700:3033::ac43:9bf9
- Cloudflare
- Cloudflare (104.21.66.39, 172.67.155.249): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rewards-metamask.orgLookalike of metamask.io · the name with the word “rewards”PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for rewards-metamask.org
- Domain
- rewards-metamask.org
- Spelling
- The name of metamask.io with the word “rewards”
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-02-12 · OwnRegistrar, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamsk.orgLookalike of metamask.io · a dropped letterPhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for metamsk.org
- Domain
- metamsk.org
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-02-05 · Cloudflare, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain and 1 name under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.services US · AS396982 · Google LLCLookalike of metamask.io · the ending .servicesPhishDestroy CommunitySuspicious · highGoogle Cloud
DetailsHide details for metamask.services
- Domain
- metamask.services
- Spelling
- The name of metamask.io with the ending .services
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-01-26 · Name.com, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 34.111.179.208 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)
- Google Cloud
- Google Cloud (34.111.179.208): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-rewards.app US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · the name with the word “rewards”PhishDestroy CommunitySuspicious · highCloudflare
DetailsHide details for metamask-rewards.app
- Domain
- metamask-rewards.app
- Spelling
- The name of metamask.io with the word “rewards”
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-01-23 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.21.91.11 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.164.67 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3036::6815:5b0b2606:4700:3037::ac43:a443
- Cloudflare
- Cloudflare (104.21.91.11, 172.67.164.67): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.vipLookalike of metamask.io · the ending .vipPhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for metamask.vip
- Domain
- metamask.vip
- Spelling
- The name of metamask.io with the ending .vip
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-01-02 · Gname.com Pte. Ltd.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain and 1 name under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- meamask.com US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · a dropped letterPhishDestroy CommunitySuspicious · highCloudflare
DetailsHide details for meamask.com
- Domain
- meamask.com
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-01-01 · Ultahost, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.21.29.216 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.171.222 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:1dd82606:4700:3033::ac43:abde
- Cloudflare
- Cloudflare (104.21.29.216, 172.67.171.222): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.lifeLookalike of metamask.io · the ending .lifeNo address or mail server yet
DetailsHide details for metamask.life
- Domain
- metamask.life
- Spelling
- The name of metamask.io with the ending .life
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-12-23 · PDR Ltd. d/b/a PublicDomainRegistry.com
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasksupport.latLookalike of metamask.io · the name with an added wordPhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for metamasksupport.lat
- Domain
- metamasksupport.lat
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .lat zone file, already registered
- Registered
- 2025-12-11 · Spaceship, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.systemsLookalike of metamask.io · the ending .systemsNo address or mail server yet
DetailsHide details for metamask.systems
- Domain
- metamask.systems
- Spelling
- The name of metamask.io with the ending .systems
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-12-01 · PDR Ltd. d/b/a PublicDomainRegistry.com
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamsk.servicesLookalike of metamask.io · a dropped letterNo address or mail server yet
DetailsHide details for metamsk.services
- Domain
- metamsk.services
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-11-01 · the day we first found it in the .services zone file, already registered
- Registered
- 2025-11-27 · Tucows Domains Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-support.liveLookalike of metamask.io · the name with the word “support”No address or mail server yet
DetailsHide details for metamask-support.live
- Domain
- metamask-support.live
- Spelling
- The name of metamask.io with the word “support”
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2025-11-25 · PDR Ltd. d/b/a PublicDomainRegistry.com
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- megamask.store RU · AS198610 · BEGET-AS Beget LLCLookalike of metamask.io · a letter from a neighbouring keyMX present
DetailsHide details for megamask.store
- Domain
- megamask.store
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-11-25 · Beget LLC
- Addresses
- 5.101.152.161 · Russia · AS198610 BEGET-AS Beget LLC
- MX
- mx1.beget.commx2.beget.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.betLookalike of metamask.io · the ending .betMX present
DetailsHide details for metamask.bet
- Domain
- metamask.bet
- Spelling
- The name of metamask.io with the ending .bet
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-11-12 · PDR Ltd. d/b/a PublicDomainRegistry.com
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.media US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · the ending .mediaCloudflare
DetailsHide details for metamask.media
- Domain
- metamask.media
- Spelling
- The name of metamask.io with the ending .media
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-11-04 · Web Commerce Communications Limited dba WebNic.cc
- Addresses
- 104.21.38.8 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.216.200 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:26082606:4700:3034::ac43:d8c8
- Cloudflare
- Cloudflare (104.21.38.8, 172.67.216.200): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- meta0mask.site AU · AS154653 · ParkLogic Pty LtdLookalike of metamask.io · an added characterParking page · ParkLogicMX present
DetailsHide details for meta0mask.site
- Domain
- meta0mask.site
- Spelling
- Spelled like metamask.io with an added character
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2025-11-03 · NameSilo, LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates meta0mask.site to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- meta0mask.xyz AU · AS154653 · ParkLogic Pty LtdLookalike of metamask.io · an added characterParking page · ParkLogicMX present
DetailsHide details for meta0mask.xyz
- Domain
- meta0mask.xyz
- Spelling
- Spelled like metamask.io with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-11-03 · NameSilo, LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates meta0mask.xyz to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskupdate.site SG · AS63949 · Akamai Connected Cloud3 addressesLookalike of metamask.io · the name with an added wordAkamai LinodeParking page · ParkLogic
DetailsHide details for metamaskupdate.site
- Domain
- metamaskupdate.site
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2025-10-30 · Hosting Concepts B.V. d/b/a Registrar.eu
- Addresses
- 172.236.104.43 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.236.104.157 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.238.172.122 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.236.104.43, 172.236.104.157, 172.238.172.122): a cloud provider. It rents servers and addresses to its customers.
- Parking page · ParkLogic
- The registry delegates metamaskupdate.site to ParkLogic’s nameservers, which answer for it. ParkLogic: a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- claimmetamask.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the name with an added wordRegistry lookup queuedAmazon Web Services
DetailsHide details for claimmetamask.xyz
- Domain
- claimmetamask.xyz
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-10-28 · GoDaddy.com, LLC
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasksupport.help US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the name with an added wordPhishDestroy CommunitySuspicious · highAmazon Web Services
DetailsHide details for metamasksupport.help
- Domain
- metamasksupport.help
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .help zone file, already registered
- Registered
- 2025-10-27 · Key-Systems, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain and 2 names under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskkyc.site SG · AS63949 · Akamai Connected Cloud3 addressesLookalike of metamask.io · the name with an added wordAkamai LinodeParking page · ParkLogic
DetailsHide details for metamaskkyc.site
- Domain
- metamaskkyc.site
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2025-10-23 · Hosting Concepts B.V. d/b/a Registrar.eu
- Addresses
- 172.232.29.171 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.220.168 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.239.193.234 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.29.171, 172.234.220.168, 172.239.193.234): a cloud provider. It rents servers and addresses to its customers.
- Parking page · ParkLogic
- The registry delegates metamaskkyc.site to ParkLogic’s nameservers, which answer for it. ParkLogic: a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaomask.top AU · AS154653 · ParkLogic Pty LtdLookalike of metamask.io · an added characterParking page · ParkLogicMX present
DetailsHide details for metaomask.top
- Domain
- metaomask.top
- Spelling
- Spelled like metamask.io with an added character
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2025-10-22 · NameSilo,LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates metaomask.top to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.quest AU · AS133618 · Trellian Pty. LimitedLookalike of metamask.io · the ending .questParking page · Above.comMX present
DetailsHide details for metamask.quest
- Domain
- metamask.quest
- Spelling
- The name of metamask.io with the ending .quest
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-10-16 · Dynadot Inc
- Addresses
- 103.224.212.142 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Above.com
- The registry delegates metamask.quest to Above.com’s nameservers, which answer for it. Above.com: a parking service. It answers for names that are typically for sale or unused. Trellian / Above.com (103.224.212.142): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskbilling.info CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · the name with an added wordParking page · Hostinger expired-domain page
DetailsHide details for metamaskbilling.info
- Domain
- metamaskbilling.info
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2025-10-10 · HOSTINGER operations, UAB
- Addresses
- 2.57.91.92 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger expired-domain page (parking page)
- Parking page · Hostinger expired-domain page
- The registry delegates metamaskbilling.info to Hostinger expired-domain page’s nameservers, which answer for it. Hostinger expired-domain page (2.57.91.92): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaks.pro RU · AS9123 · TimeWeb-AS JSC "TIMEWEB"2 addressesLookalike of metamask.io · two letters swappedMX present
DetailsHide details for metamaks.pro
- Domain
- metamaks.pro
- Spelling
- Spelled like metamask.io with two letters swapped
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2025-10-06 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Addresses
- 92.53.125.14 · Russia · AS9123 TimeWeb-AS JSC "TIMEWEB"2a03:6f00:1:2::10
- MX
- mx1.timeweb.rumx2.timeweb.ru
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskonlinesupport.sbs AU · AS133618 · Trellian Pty. LimitedLookalike of metamask.io · the name with an added wordParking page · Trellian / Above.comMX present
DetailsHide details for metamaskonlinesupport.sbs
- Domain
- metamaskonlinesupport.sbs
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .sbs zone file, already registered
- Registered
- 2025-10-01 · OwnRegistrar, Inc.
- Addresses
- 103.224.182.245 · Australia · AS133618 TRELLIAN-AS-AP - Trellian Pty. Limited · Trellian / Above.com (parking page)
- Parking page · Trellian / Above.com
- Trellian / Above.com (103.224.182.245): a parking service. It answers for names that are typically for sale or unused.
- MX
- park-mx.above.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.network AU · AS154653 · ParkLogic Pty LtdLookalike of metamask.io · the ending .networkParking page · Sav.com
DetailsHide details for metamask.network
- Domain
- metamask.network
- Spelling
- The name of metamask.io with the ending .network
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-09-27 · Sav.com, LLC
- Addresses
- 162.4.84.252 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · Sav.com
- The registry delegates metamask.network to Sav.com’s nameservers, which answer for it. Sav.com: a parking service. It answers for names that are typically for sale or unused. ParkLogic (162.4.84.252): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnetamask.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · similar-looking charactersParking page · Hostinger expired-domain page
DetailsHide details for rnetamask.site
- Domain
- rnetamask.site
- Spelling
- Spelled like metamask.io with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-25 · HOSTINGER operations, UAB
- Addresses
- 2.57.91.92 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger expired-domain page (parking page)
- Parking page · Hostinger expired-domain page
- The registry delegates rnetamask.site to Hostinger expired-domain page’s nameservers, which answer for it. Hostinger expired-domain page (2.57.91.92): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- meetamask.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · a doubled letterParking page · Hostinger expired-domain page
DetailsHide details for meetamask.site
- Domain
- meetamask.site
- Spelling
- Spelled like metamask.io with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-23 · HOSTINGER operations, UAB
- Addresses
- 2.57.91.92 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger expired-domain page (parking page)
- Parking page · Hostinger expired-domain page
- The registry delegates meetamask.site to Hostinger expired-domain page’s nameservers, which answer for it. Hostinger expired-domain page (2.57.91.92): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnetamask.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · similar-looking charactersRegistry lookup queuedAmazon Web Services
DetailsHide details for rnetamask.com
- Domain
- rnetamask.com
- Spelling
- Spelled like metamask.io with similar-looking characters
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-22 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamas.co US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterAmazon Web Services
DetailsHide details for metamas.co
- Domain
- metamas.co
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-14 · GoDaddy.com, LLC
- Addresses
- 3.33.251.168 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.225.128 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.251.168, 15.197.225.128): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamas.info US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterRegistry lookup queuedAmazon Web Services
DetailsHide details for metamas.info
- Domain
- metamas.info
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-14 · GoDaddy.com, LLC
- Addresses
- 3.33.251.168 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.225.128 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.251.168, 15.197.225.128): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamas.net US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterRegistry lookup queuedAmazon Web Services
DetailsHide details for metamas.net
- Domain
- metamas.net
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-14 · GoDaddy.com, LLC
- Addresses
- 3.33.251.168 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.225.128 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.251.168, 15.197.225.128): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamas.shop US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterRegistry lookup queuedAmazon Web Services
DetailsHide details for metamas.shop
- Domain
- metamas.shop
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-14 · GoDaddy.com LLC
- Addresses
- 3.33.251.168 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.225.128 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.251.168, 15.197.225.128): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamas.store US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterRegistry lookup queuedAmazon Web Services
DetailsHide details for metamas.store
- Domain
- metamas.store
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-09-14 · GoDaddy.com, LLC
- Addresses
- 3.33.251.168 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.225.128 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.251.168, 15.197.225.128): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.co.in CY · AS47583 · AS-HOSTINGER Hostinger Inte…4 addressesLookalike of metamask.io · the ending .co.inPhishDestroy CommunitySuspicious · highHostinger CDNMX present
DetailsHide details for metamask.co.in
- Domain
- metamask.co.in
- Spelling
- The name of metamask.io with the ending .co.in
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-08-25 · GoDaddy
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 191.96.144.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)212.1.212.79 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)2a02:4780:21:5f85:5001:9451:f3de:e3452a02:4780:22:922b:1f23:7ff7:8478:a0eb
- Hostinger CDN
- Hostinger CDN (191.96.144.91, 212.1.212.79): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-service.org US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the name with the word “service”PhishDestroy CommunitySuspicious · highRegistry lookup queuedAmazon Web ServicesMX present
DetailsHide details for metamask-service.org
- Domain
- metamask-service.org
- Spelling
- The name of metamask.io with the word “service”
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2025-08-13 · GoDaddy.com, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- MX
- emx.mail.ru
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.foundation US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .foundationAmazon Web Services
DetailsHide details for metamask.foundation
- Domain
- metamask.foundation
- Spelling
- The name of metamask.io with the ending .foundation
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-01-01 · Sav.com, LLC - 37
- Addresses
- 44.232.173.249 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)52.40.42.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (44.232.173.249, 52.40.42.113): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaso.io US · AS16509 · Amazon.com, Inc.3 addressesLookalike of metamask.io · a letter from a neighbouring keyAmazon Web Services
DetailsHide details for metamaso.io
- Domain
- metamaso.io
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-11-28 · Porkbun LLC
- Addresses
- 207.207.210.23 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.36 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.50 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.23, 207.207.210.36, 207.207.210.50): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.online DK · AS51468 · ONECOM One.com A/S2 addressesLookalike of metamask.io · the ending .online
DetailsHide details for metamask.online
- Domain
- metamask.online
- Spelling
- The name of metamask.io with the ending .online
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-09-04 · Hosting Concepts B.V. d/b/a Registrar.eu
- Addresses
- 77.111.243.70 · Denmark · AS51468 ONECOM One.com A/S2a02:2350:5:113:809e:e441:24a9:afd9
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.cardsLookalike of metamask.io · the ending .cardsNo address or mail server yet
DetailsHide details for metamask.cards
- Domain
- metamask.cards
- Spelling
- The name of metamask.io with the ending .cards
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2024-08-18 · Cloudflare, Inc
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metsmask.com US · AS14618 · Amazon.com, Inc.4 addressesLookalike of metamask.io · a letter from a neighbouring keyPhishDestroy CommunitySuspicious · mediumParking page · HugeDomains
DetailsHide details for metsmask.com
- Domain
- metsmask.com
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-08-01 · TurnCommerce, Inc. DBA NameBright.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 13.223.25.84 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · HugeDomains (parking page)54.243.117.197 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · HugeDomains (parking page)2600:1f18:4ae:c605:dd5d:b838:5816:d7fb2600:1f18:4ae:c606:78d4:4260:db4e:aeee
- Parking page · HugeDomains
- HugeDomains (13.223.25.84, 54.243.117.197): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamas.org US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterRegistry lookup queuedAmazon Web ServicesMX present
DetailsHide details for metamas.org
- Domain
- metamas.org
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-07-28 · GoDaddy.com, LLC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- MX
- metamas-org.mail.protection.outlook.com
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mteamask.com US · AS14618 · Amazon.com, Inc.4 addressesLookalike of metamask.io · two letters swappedParking page · HugeDomains
DetailsHide details for mteamask.com
- Domain
- mteamask.com
- Spelling
- Spelled like metamask.io with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-05-22 · TurnCommerce, Inc. DBA NameBright.com
- Addresses
- 13.223.25.84 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · HugeDomains (parking page)54.243.117.197 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · HugeDomains (parking page)2600:1f18:4ae:c605:dd5d:b838:5816:d7fb2600:1f18:4ae:c606:78d4:4260:db4e:aeee
- Parking page · HugeDomains
- HugeDomains (13.223.25.84, 54.243.117.197): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.gold US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .goldParking page · Afternic
DetailsHide details for metamask.gold
- Domain
- metamask.gold
- Spelling
- The name of metamask.io with the ending .gold
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2023-12-28 · Xiamen ChinaSource Internet Service Co., Ltd
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamask.gold to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamak.orgLookalike of metamask.io · a dropped letterMX present
DetailsHide details for metamak.org
- Domain
- metamak.org
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2023-04-15 · Squarespace Domains II LLC
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metwmask.io US · AS16509 · Amazon.com, Inc.3 addressesLookalike of metamask.io · a letter from a neighbouring keyAmazon Web Services
DetailsHide details for metwmask.io
- Domain
- metwmask.io
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2023-04-12 · Porkbun LLC
- Addresses
- 207.207.210.23 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.36 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.50 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.23, 207.207.210.36, 207.207.210.50): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mstamask.io US · AS16509 · Amazon.com, Inc.3 addressesLookalike of metamask.io · a letter from a neighbouring keyAmazon Web Services
DetailsHide details for mstamask.io
- Domain
- mstamask.io
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2023-04-12 · Porkbun LLC
- Addresses
- 207.207.210.23 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.36 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.50 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.23, 207.207.210.36, 207.207.210.50): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- megamask.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a letter from a neighbouring keyRegistry lookup queuedAmazon Web Services
DetailsHide details for megamask.xyz
- Domain
- megamask.xyz
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2022-03-03 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.dayLookalike of metamask.io · the ending .dayNo address or mail server yet
DetailsHide details for metamask.day
- Domain
- metamask.day
- Spelling
- The name of metamask.io with the ending .day
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2022-02-02 · Squarespace Domains II LLC.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.no SE · AS39570 · LOOPIA Loopia AB2 addressesLookalike of metamask.io · the ending .no
DetailsHide details for metamask.no
- Domain
- metamask.no
- Spelling
- The name of metamask.io with the ending .no
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2021-12-07 · Ascio Technologies Inc.
- Addresses
- 194.9.94.85 · Sweden · AS39570 LOOPIA Loopia AB194.9.94.86 · Sweden · AS39570 LOOPIA Loopia AB
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamak.net US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterParking page · Afternic
DetailsHide details for metamak.net
- Domain
- metamak.net
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2021-11-29 · Sav.com, LLC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamak.net to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasm.io DE · AS47846 · SEDO-AS SEDO GmbHLookalike of metamask.io · a letter from a neighbouring keyPhishDestroy CommunitySuspicious · mediumParking page · Sedo
DetailsHide details for metamasm.io
- Domain
- metamasm.io
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2021-10-11 · Name.com, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes portfolio.metamasm.io, a name under this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamzsk.io DE · AS47846 · SEDO-AS SEDO GmbHLookalike of metamask.io · a letter from a neighbouring keyPhishDestroy CommunitySuspicious · mediumParking page · Sedo
DetailsHide details for metamzsk.io
- Domain
- metamzsk.io
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2021-10-11 · Name.com, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain and 1 name under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metzmask.io DE · AS47846 · SEDO-AS SEDO GmbHLookalike of metamask.io · a letter from a neighbouring keyParking page · Sedo
DetailsHide details for metzmask.io
- Domain
- metzmask.io
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2021-10-11 · Name.com, Inc.
- Addresses
- 91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.ai US · AS14618 · Amazon.com, Inc.Lookalike of metamask.io · the ending .aiParking page · Atom
DetailsHide details for metamask.ai
- Domain
- metamask.ai
- Spelling
- The name of metamask.io with the ending .ai
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2021-04-05 · Spaceship, Inc.
- Addresses
- 52.20.84.62 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Atom (parking page)
- Parking page · Atom
- The registry delegates metamask.ai to Atom’s nameservers, which answer for it. Atom (52.20.84.62): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- emtamask.io AU · AS154653 · ParkLogic Pty LtdLookalike of metamask.io · two letters swappedParking page · ParkLogicMX present
DetailsHide details for emtamask.io
- Domain
- emtamask.io
- Spelling
- Spelled like metamask.io with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2020-10-20 · NameSilo, LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates emtamask.io to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaamsk.io AU · AS154653 · ParkLogic Pty LtdLookalike of metamask.io · two letters swappedParking page · ParkLogicMX present
DetailsHide details for metaamsk.io
- Domain
- metaamsk.io
- Spelling
- Spelled like metamask.io with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2020-10-20 · NameSilo, LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates metaamsk.io to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamsak.io AU · AS154653 · ParkLogic Pty LtdLookalike of metamask.io · two letters swappedParking page · ParkLogicMX present
DetailsHide details for metamsak.io
- Domain
- metamsak.io
- Spelling
- Spelled like metamask.io with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2020-10-20 · NameSilo, LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates metamsak.io to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- mteamask.io AU · AS154653 · ParkLogic Pty LtdLookalike of metamask.io · two letters swappedParking page · ParkLogicMX present
DetailsHide details for mteamask.io
- Domain
- mteamask.io
- Spelling
- Spelled like metamask.io with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2020-10-20 · NameSilo, LLC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates mteamask.io to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- meramask.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a letter from a neighbouring keyRegistry lookup queuedAmazon Web Services
DetailsHide details for meramask.com
- Domain
- meramask.com
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2020-03-04 · Wild West Domains, LLC
- Addresses
- 13.248.213.45 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.67.189 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.213.45, 76.223.67.189): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaask.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterRegistry lookup queuedAmazon Web Services
DetailsHide details for metaask.com
- Domain
- metaask.com
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2020-02-12 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaks.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · two letters swappedParking page · Afternic
DetailsHide details for metamaks.com
- Domain
- metamaks.com
- Spelling
- Spelled like metamask.io with two letters swapped
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2019-10-11 · Spaceship, Inc.
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamaks.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.app DE · AS47846 · SEDO-AS SEDO GmbHLookalike of metamask.io · the ending .appPhishDestroy CommunitySuspicious · mediumParking page · Sedo
DetailsHide details for metamask.app
- Domain
- metamask.app
- Spelling
- The name of metamask.io with the ending .app
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2018-05-08 · Soluciones Corporativas IP, SLU
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain and 2 names under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 64.190.63.222 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- The registry delegates metamask.app to Sedo’s nameservers, which answer for it. Sedo (64.190.63.222): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.nlLookalike of metamask.io · the ending .nlNo address or mail server yet
DetailsHide details for metamask.nl
- Domain
- metamask.nl
- Spelling
- The name of metamask.io with the ending .nl
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2017-05-20 · GoDaddy.com
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- megamask.biz US · AS19871 · Network Solutions, LLCLookalike of metamask.io · a letter from a neighbouring keyParking page · Network Solutions
DetailsHide details for megamask.biz
- Domain
- megamask.biz
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2001-11-10 · Network Solutions, LLC
- Addresses
- 209.17.116.163 · United States · AS19871 NETWORK-SOLUTIONS-HOSTING - Network Solutions, LLC · Network Solutions (parking page)
- Parking page · Network Solutions
- Network Solutions (209.17.116.163): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- megamask.com US · AS19871 · Network Solutions, LLCLookalike of metamask.io · a letter from a neighbouring keyRegistry lookup queuedParking page · Network Solutions
DetailsHide details for megamask.com
- Domain
- megamask.com
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2001-09-07 · Network Solutions, LLC
- Addresses
- 209.17.116.163 · United States · AS19871 NETWORK-SOLUTIONS-HOSTING - Network Solutions, LLC · Network Solutions (parking page)
- Parking page · Network Solutions
- Network Solutions (209.17.116.163): a parking service. It answers for names that are typically for sale or unused.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
Registered domains using the name
Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches MetaMask's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.
- add-tx-metamask.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “metamask”Listed by MetaMaskAddress on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for add-tx-metamask.online
- Domain
- add-tx-metamask.online
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-10-19 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · add-tx-metamask.online · in the feed since 2026-10-27 05:34 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · add-tx-metamask.online resolved to it 2026-11-05 00:36 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-funds.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”Listed by MetaMaskCloudflare
DetailsHide details for metamask-funds.xyz
- Domain
- metamask-funds.xyz
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-10-15 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask-funds.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.38.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.219.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:26362606:4700:3036::ac43:db86
- Cloudflare
- Cloudflare (104.21.38.54, 172.67.219.134): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-wallet.helpContains “metamask”Listed by MetaMaskMX present
DetailsHide details for metamask-wallet.help
- Domain
- metamask-wallet.help
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .help zone file, already registered
- Registered
- 2026-10-07 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask-wallet.help · in the feed since 2026-10-27 05:34 UTC
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-pc.org GB · AS197574 · EXPRESSHOST ExpressHost LtdContains “metamask”Listed by MetaMaskAddress on DomainSpoof’s phishing-host list
DetailsHide details for metamask-pc.org
- Domain
- metamask-pc.org
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-10-06 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask-pc.org · in the feed since 2026-10-27 05:34 UTC
- Address on DomainSpoof’s phishing-host list
- 154.86.119.115 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask-pc.org resolved to it 2026-11-05 00:36 UTC
- Addresses
- 154.86.119.115 · United Kingdom · AS197574 EXPRESSHOST ExpressHost Ltd
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-air.org DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Contains “metamask”Listed by MetaMaskParking page · ParkingCrew (Team Internet)
DetailsHide details for metamask-air.org
- Domain
- metamask-air.org
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-09-27 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask-air.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- app-metamask.services US · AS214036 · ULTAHOST-AS Ultahost, Inc.Contains “metamask”Listed by MetaMask
DetailsHide details for app-metamask.services
- Domain
- app-metamask.services
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .services zone file, already registered
- Registered
- 2026-09-11 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · app-metamask.services · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 159.100.13.207 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- v5-metamask.org US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”Listed by MetaMaskCloudflare
DetailsHide details for v5-metamask.org
- Domain
- v5-metamask.org
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-08-06 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · v5-metamask.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.78.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.214.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:d6422606:4700:3035::6815:4e04
- Cloudflare
- Cloudflare (104.21.78.4, 172.67.214.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- meta-mask.orgContains “meta-mask”Reported by PhishDestroyNo address or mail server now
DetailsHide details for meta-mask.org
- Domain
- meta-mask.org
- Match
- A registered domain containing “meta-mask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-07-14 · Vautron Rechenzentrum AG
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · meta-mask.org · in the feed since 2026-11-03 21:22 UTC
- No address or mail server now
- Registered; earlier daily DNS checks found an address or mail server for the domain, the last one found neither. The label goes when it gets one again.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskpro.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “metamask”Listed by MetaMaskParking page · Afternic
DetailsHide details for metamaskpro.xyz
- Domain
- metamaskpro.xyz
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-17 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamaskpro.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamaskpro.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-wallet.site MY · AS45839 · Shinjiru Technology Sdn BhdContains “metamask”Listed by MetaMask
DetailsHide details for metamask-wallet.site
- Domain
- metamask-wallet.site
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2026-05-04 · Gname.com Pte. Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask-wallet.site · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 111.90.149.159 · Malaysia · AS45839 SHINJIRU-MY-AS-AP - Shinjiru Technology Sdn Bhd
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-web.asia GB · AS212701 · HOSTINUX-AS Hostinux LimitedContains “metamask”Reported by PhishDestroyAddress on DomainSpoof’s phishing-host list
DetailsHide details for metamask-web.asia
- Domain
- metamask-web.asia
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .asia zone file, already registered
- Registered
- 2026-03-21 · Global Domain Group LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamask-web.asia · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 147.45.198.180 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask-web.asia resolved to it 2026-11-05 00:36 UTC
- Addresses
- 147.45.198.180 · United Kingdom · AS212701 HOSTINUX-AS Hostinux Limited
- Daily check
- Ended 2026-11-04 22:41 UTC
- meta-mask.pro AE · AS205282 · ie-tildapublishing-1 TILDA …Contains “meta-mask”Listed by MetaMask
DetailsHide details for meta-mask.pro
- Domain
- meta-mask.pro
- Match
- A domain containing “meta-mask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-03-03 · Web Commerce Communications Limited dba WebNic.cc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · meta-mask.pro · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 194.48.203.112 · United Arab Emirates · AS205282 ie-tildapublishing-1 TILDA PLATFORM CLOUD SERVICES CO. L.L.C
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-node.site AE · AS216071 · VDSINA SERVERS TECH FZCOContains “metamask”Reported by PhishDestroyAddress on DomainSpoof’s phishing-host list
DetailsHide details for metamask-node.site
- Domain
- metamask-node.site
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2026-01-26 · Registrar of Domain Names REG.RU LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamask-node.site · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 91.84.105.178 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask-node.site resolved to it 2026-11-05 00:36 UTC
- Addresses
- 91.84.105.178 · United Arab Emirates · AS216071 VDSINA SERVERS TECH FZCO
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskweb.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “metamask”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for metamaskweb.site
- Domain
- metamaskweb.site
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-01-07 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamaskweb.site resolved to it 2026-11-05 00:36 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- meta-mask.tech CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “meta-mask”Address on DomainSpoof’s phishing-host listPhishDestroy CommunityHostingerMX present
DetailsHide details for meta-mask.tech
- Domain
- meta-mask.tech
- Match
- A domain containing “meta-mask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .tech zone file, already registered
- Registered
- 2026-01-06 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · meta-mask.tech resolved to it 2026-11-05 00:36 UTC
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- meta-mask.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “meta-mask”Address on DomainSpoof’s phishing-host listPhishDestroy CommunityHostinger
DetailsHide details for meta-mask.online
- Domain
- meta-mask.online
- Match
- A registered domain containing “meta-mask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2026-01-06 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · meta-mask.online resolved to it 2026-11-05 00:36 UTC
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- meta-mask.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “meta-mask”Listed by MetaMaskReported by PhishDestroyParking page · Afternic
DetailsHide details for meta-mask.xyz
- Domain
- meta-mask.xyz
- Match
- A domain containing “meta-mask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-15 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · meta-mask.xyz · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · meta-mask.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates meta-mask.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskconnect.org CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “metamask”Address on DomainSpoof’s phishing-host listPhishDestroy CommunityHostinger
DetailsHide details for metamaskconnect.org
- Domain
- metamaskconnect.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2025-04-09 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamaskconnect.org resolved to it 2026-11-05 00:36 UTC
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskofficial.support US · AS14618 · Amazon.com, Inc.Contains “metamask”Listed by MetaMaskReported by PhishDestroyAmazon Web Services
DetailsHide details for metamaskofficial.support
- Domain
- metamaskofficial.support
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .support zone file, already registered
- Registered
- 2022-02-19 · GoDaddy Online Services Cayman Islands Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamaskofficial.support · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamaskofficial.support · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 52.87.196.211 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (52.87.196.211): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- meta-mask.infoContains “meta-mask”PhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for meta-mask.info
- Domain
- meta-mask.info
- Match
- A registered domain containing “meta-mask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-09-22 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- MX
- aspmx.l.google.comsmtp.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-cards.app US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”Cloudflare
DetailsHide details for metamask-cards.app
- Domain
- metamask-cards.app
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-08-20 · Dynadot LLC.
- Addresses
- 104.21.25.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.134.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:86f62606:4700:3032::6815:19fd
- Cloudflare
- Cloudflare (104.21.25.253, 172.67.134.246): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-cards.org US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”Cloudflare
DetailsHide details for metamask-cards.org
- Domain
- metamask-cards.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-08-20 · Dynadot Inc
- Addresses
- 104.21.87.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.143.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:8f052606:4700:3036::6815:5772
- Cloudflare
- Cloudflare (104.21.87.114, 172.67.143.5): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskapp.info US · AS16509 · Amazon.com, Inc.2 addressesContains “metamask”PhishDestroy CommunitySuspicious · highRegistry lookup queuedAmazon Web ServicesMX present
DetailsHide details for metamaskapp.info
- Domain
- metamaskapp.info
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-07-30 · GoDaddy.com, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- MX
- smtp.secureserver.netmailstore1.secureserver.net
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-extension.org US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”Cloudflare
DetailsHide details for metamask-extension.org
- Domain
- metamask-extension.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-07-29 · Hosting Concepts B.V. d/b/a Registrar.eu
- Addresses
- 104.21.22.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.207.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:16ed2606:4700:3035::ac43:cf98
- Cloudflare
- Cloudflare (104.21.22.237, 172.67.207.152): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-financial.helpContains “metamask”MX present
DetailsHide details for metamask-financial.help
- Domain
- metamask-financial.help
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .help zone file copy it was found in
- Registered
- 2026-07-22 · NameSilo, LLC
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasklab.orgContains “metamask”MX present
DetailsHide details for metamasklab.org
- Domain
- metamasklab.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-05-28 · NameSilo, LLC
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskwallet.orgContains “metamask”PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for metamaskwallet.org
- Domain
- metamaskwallet.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-04-08 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- crypto-metamask.infoContains “metamask”MX present
DetailsHide details for crypto-metamask.info
- Domain
- crypto-metamask.info
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-04-02 · PDR Ltd. d/b/a PublicDomainRegistry.com
- MX
- us2.mx1.mailhostbox.comus2.mx2.mailhostbox.comus2.mx3.mailhostbox.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskwallet.topContains “metamask”PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for metamaskwallet.top
- Domain
- metamaskwallet.top
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-03-27 · PDR Ltd.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskwallet.digitalContains “metamask”PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for metamaskwallet.digital
- Domain
- metamaskwallet.digital
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .digital zone file, already registered
- Registered
- 2026-03-19 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-wallet.infoContains “metamask”PhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for metamask-wallet.info
- Domain
- metamask-wallet.info
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-03-06 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain and 1 name under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- MX
- mailserver.purelymail.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-official.org US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”PhishDestroy CommunitySuspicious · highCloudflare
DetailsHide details for metamask-official.org
- Domain
- metamask-official.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-02-22 · CNOBIN INFORMATION TECHNOLOGY LIMITED
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.21.9.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.141.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3037::6815:91c2606:4700:3037::ac43:8d2f
- Cloudflare
- Cloudflare (104.21.9.28, 172.67.141.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-limit.site DE · AS47846 · SEDO-AS SEDO GmbHContains “metamask”Parking page · SedoMX present
DetailsHide details for metamask-limit.site
- Domain
- metamask-limit.site
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-02-18 · NameSilo, LLC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-limit.org DE · AS47846 · SEDO-AS SEDO GmbHContains “metamask”PhishDestroy CommunitySuspicious · mediumParking page · SedoMX present
DetailsHide details for metamask-limit.org
- Domain
- metamask-limit.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-02-16 · NameSilo, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-hq.orgContains “metamask”PhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for metamask-hq.org
- Domain
- metamask-hq.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-01-28 · Cloudflare, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- MX
- mx.zoho.eumx2.zoho.eumx3.zoho.eu
- Daily check
- Ended 2026-11-04 22:41 UTC
- web3metamask-assist.org DE · AS28753 · LEASEWEB-DE-FRA-10 Leaseweb…Contains “metamask”PhishDestroy CommunitySuspicious · highMX present
DetailsHide details for web3metamask-assist.org
- Domain
- web3metamask-assist.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-01-28 · Unstoppable Domains Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 37.1.194.109 · Germany · AS28753 LEASEWEB-DE-FRA-10 Leaseweb Deutschland GmbH
- MX
- mail.web3metamask-assist.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-wallet.tech US · AS14061 · DigitalOcean, LLC2 addressesContains “metamask”PhishDestroy CommunitySuspicious · mediumDigitalOcean
DetailsHide details for metamask-wallet.tech
- Domain
- metamask-wallet.tech
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .tech zone file, already registered
- Registered
- 2026-01-16 · Nicnames, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 159.203.143.218 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)2604:a880:800:14:0:1:225d:c000
- DigitalOcean
- DigitalOcean (159.203.143.218): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-it.networkContains “metamask”PhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for metamask-it.network
- Domain
- metamask-it.network
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .network zone file, already registered
- Registered
- 2026-01-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- MX
- aspmx1.migadu.comaspmx2.migadu.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskweb.saleContains “metamask”PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for metamaskweb.sale
- Domain
- metamaskweb.sale
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .sale zone file, already registered
- Registered
- 2026-01-14 · Name.com, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-web.orgContains “metamask”PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for metamask-web.org
- Domain
- metamask-web.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-01-10 · Name.com, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskweb.orgContains “metamask”PhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for metamaskweb.org
- Domain
- metamaskweb.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-01-03 · HOSTINGER operations, UAB
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskusa.infoContains “metamask”MX present
DetailsHide details for metamaskusa.info
- Domain
- metamaskusa.info
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2025-12-29 · Name.com, Inc.
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskupdte.cfdContains “metamask”No address or mail server yet
DetailsHide details for metamaskupdte.cfd
- Domain
- metamaskupdte.cfd
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .cfd zone file copy it was found in
- Registered
- 2025-12-03 · OwnRegistrar, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-dapps.info US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”Cloudflare
DetailsHide details for metamask-dapps.info
- Domain
- metamask-dapps.info
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2025-11-20 · Dynadot Inc
- Addresses
- 104.21.39.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.148.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:27ba2606:4700:3036::ac43:9441
- Cloudflare
- Cloudflare (104.21.39.186, 172.67.148.65): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-dapps.online US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”Cloudflare
DetailsHide details for metamask-dapps.online
- Domain
- metamask-dapps.online
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2025-11-20 · Dynadot Inc
- Addresses
- 104.21.42.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.163.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:2aa32606:4700:3037::ac43:a38a
- Cloudflare
- Cloudflare (104.21.42.163, 172.67.163.138): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-wallet.orgContains “metamask”PhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for metamask-wallet.org
- Domain
- metamask-wallet.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2025-11-10 · Web Commerce Communications Limited dba WebNic.cc
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- MX
- mx.zoho.commx2.zoho.commx3.zoho.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskconnect.app US · AS396982 · Google LLC2 addressesContains “metamask”PhishDestroy CommunitySuspicious · highGoogle CloudMX present
DetailsHide details for metamaskconnect.app
- Domain
- metamaskconnect.app
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2025-11-05 · Sav.com, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain and 2 names under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 34.76.205.124 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)2600:1901:0:51b9::
- Google Cloud
- Google Cloud (34.76.205.124): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx.all-harmless.domains
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-wallet.app US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”PhishDestroy CommunitySuspicious · highCloudflareMX present
DetailsHide details for metamask-wallet.app
- Domain
- metamask-wallet.app
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2025-11-01 · Porkbun LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.21.78.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.215.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:4e212606:4700:3035::ac43:d762
- Cloudflare
- Cloudflare (104.21.78.33, 172.67.215.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mx.zoho.eumx2.zoho.eumx3.zoho.eu
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskvip.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”Registry lookup queuedCloudflare
DetailsHide details for metamaskvip.xyz
- Domain
- metamaskvip.xyz
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-09-13 · GoDaddy.com, LLC
- Addresses
- 104.21.39.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.146.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:278a2606:4700:3037::ac43:9218
- Cloudflare
- Cloudflare (104.21.39.138, 172.67.146.24): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskofficial.icuContains “metamask”MX present
DetailsHide details for metamaskofficial.icu
- Domain
- metamaskofficial.icu
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .icu zone file copy it was found in
- Registered
- 2025-07-08 · PDR Ltd. d/b/a PublicDomainRegistry.com
- MX
- emx.mail.ru
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskvip.org DE · AS47846 · SEDO-AS SEDO GmbHContains “metamask”PhishDestroy CommunitySuspicious · mediumParking page · Sedo
DetailsHide details for metamaskvip.org
- Domain
- metamaskvip.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2025-05-20 · NameSilo, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-europe.org US · AS16509 · Amazon.com, Inc.2 addressesContains “metamask”Registry lookup queuedAmazon Web ServicesMX present
DetailsHide details for metamask-europe.org
- Domain
- metamask-europe.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2025-04-26 · GoDaddy.com, LLC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- MX
- metamaskeurope-org02b.mail.protection.outlook.com
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- meta-mask.supportContains “meta-mask”MX present
DetailsHide details for meta-mask.support
- Domain
- meta-mask.support
- Match
- A registered domain containing “meta-mask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .support zone file copy it was found in
- Registered
- 2025-01-08 · NameSilo, LLC
- MX
- metamask-support01b.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskno-reply.org AU · AS154653 · ParkLogic Pty LtdContains “metamask”PhishDestroy CommunitySuspicious · mediumParking page · ParkLogicMX present
DetailsHide details for metamaskno-reply.org
- Domain
- metamaskno-reply.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2024-10-09 · NameSilo, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates metamaskno-reply.org to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-eu.org UA · AS56851 · VPS-UA-AS PE Skurykhin Muko…Contains “metamask”PhishDestroy CommunitySuspicious · highMX present
DetailsHide details for metamask-eu.org
- Domain
- metamask-eu.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2024-07-18 · Hosting Concepts B.V. d/b/a Registrar.eu
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 45.94.158.225 · Ukraine · AS56851 VPS-UA-AS PE Skurykhin Mukola Volodumurovuch
- MX
- metamask-eu.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-labs.org US · AS53831 · Squarespace, Inc.Contains “metamask”PhishDestroy CommunitySuspicious · highSquarespaceMX present
DetailsHide details for metamask-labs.org
- Domain
- metamask-labs.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2024-06-23 · Squarespace Domains II LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 198.185.159.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
- Squarespace
- Squarespace (198.185.159.144): a site builder. It hosts pages for anyone who signs up.
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskreddit.orgContains “metamask”PhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for metamaskreddit.org
- Domain
- metamaskreddit.org
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2024-03-01 · Squarespace Domains II LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC

