MetaMask
Registered lookalikes
Spellings of metamask.io registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.
Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.
85 of the 218 are listed by a source or resolve to a listed address, checked hourly.
- metamask.blogLookalike of metamask.io · the ending .blogListed by MetaMaskReported by PhishDestroyMX present
DetailsHide details for metamask.blog
- Domain
- metamask.blog
- Spelling
- The name of metamask.io with the ending .blog
- First found
- 2026-11-04 · the day the .blog zone file first listed it as a new registration
- Registered
- 2026-11-03 · Dynadot LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.blog · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamask.blog · in the feed since 2026-11-03 21:22 UTC
- MX
- webhost.dynadot.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-recover.help AM · AS212552 · BitCommand BitCommand LLCLookalike of metamask.io · the name with the word “recover”Listed by MetaMaskMX present
DetailsHide details for metamask-recover.help
- Domain
- metamask-recover.help
- Spelling
- The name of metamask.io with the word “recover”
- First found
- 2026-11-03 · the day the .help zone file first listed it as a new registration
- Registered
- 2026-11-02 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask-recover.help · in the feed since 2026-11-03 17:48 UTC
- Addresses
- 202.133.89.169 · Armenia · AS212552 BitCommand BitCommand LLC
- MX
- mail.metamask-recover.help
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.software US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · the ending .softwareListed by MetaMaskCloudflare
DetailsHide details for metamask.software
- Domain
- metamask.software
- Spelling
- The name of metamask.io with the ending .software
- First found
- 2026-11-03 · the day the .software zone file first listed it as a new registration
- Registered
- 2026-11-02 · Sav.com, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.software · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.53.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.221.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:35fc2606:4700:3030::ac43:dda4
- Cloudflare
- Cloudflare (104.21.53.252, 172.67.221.164): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- netamask.com US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · a letter from a neighbouring keyReported by PhishDestroyCloudflare
DetailsHide details for netamask.com
- Domain
- netamask.com
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-30 · the day the daily DNS check first found it registered
- Registered
- 2026-10-30 · Moniker Online Services LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · netamask.com · in the feed since 2026-11-01 05:42 UTC
- Addresses
- 104.21.73.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.156.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:49042606:4700:3037::ac43:9c06
- Cloudflare
- Cloudflare (104.21.73.4, 172.67.156.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.win US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · the ending .winListed by MetaMaskCloudflare
DetailsHide details for metamask.win
- Domain
- metamask.win
- Spelling
- The name of metamask.io with the ending .win
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-28 · Cloudflare, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.win · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.69.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.210.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:45a52606:4700:3035::ac43:d28b
- Cloudflare
- Cloudflare (104.21.69.165, 172.67.210.139): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.cloud US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .cloudListed by MetaMaskParking page · Afternic
DetailsHide details for metamask.cloud
- Domain
- metamask.cloud
- Spelling
- The name of metamask.io with the ending .cloud
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-26 · Dynadot, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.cloud · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamask.cloud to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.mobi CN · AS45102 · Alibaba (US) Technology Co.…Lookalike of metamask.io · the ending .mobiListed by MetaMaskAddress on DomainSpoof’s phishing-host listAlibaba Cloud
DetailsHide details for metamask.mobi
- Domain
- metamask.mobi
- Spelling
- The name of metamask.io with the ending .mobi
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-23 · NameMart Pte. Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.mobi · in the feed since 2026-10-27 05:34 UTC
- Address on DomainSpoof’s phishing-host list
- 47.237.190.182 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask.mobi resolved to it 2026-11-05 05:15 UTC
- Addresses
- 47.237.190.182 · China · AS45102 ALIBABA-CN-NET - Alibaba (US) Technology Co., Ltd. · Alibaba Cloud (cloud provider)
- Alibaba Cloud
- Alibaba Cloud (47.237.190.182): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- support-metamask.info IS · AS50613 · ThorDC-AS Advania Island ehfLookalike of metamask.io · the name with the word “support”Address on DomainSpoof’s phishing-host listPhishDestroy CommunityMX present
DetailsHide details for support-metamask.info
- Domain
- support-metamask.info
- Spelling
- The name of metamask.io with the word “support”
- First found
- 2026-11-01 · the day we first found it in the .info zone file, already registered
- Registered
- 2026-10-16 · Internet Domain Service BS Corp
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 82.221.143.1 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · support-metamask.info resolved to it 2026-11-05 00:36 UTC
- PhishDestroy Community
- PhishDestroy’s community list includes this domain and 1 name under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 82.221.143.1 · Iceland · AS50613 ThorDC-AS Advania Island ehf
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasksupport.app EE · AS62005 · BV-EU-AS BlueVPS OULookalike of metamask.io · the name with an added wordListed by MetaMask
DetailsHide details for metamasksupport.app
- Domain
- metamasksupport.app
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2026-10-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamasksupport.app · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 62.204.35.164 · Estonia · AS62005 BV-EU-AS BlueVPS OU
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasksupport.live US · AS22612 · Namecheap, Inc.Lookalike of metamask.io · the name with an added wordListed by MetaMaskParking page · Namecheap parkingMX present
DetailsHide details for metamasksupport.live
- Domain
- metamasksupport.live
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-10-13 · NameCheap, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamasksupport.live · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 162.255.119.230 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap parking (parking page)
- Parking page · Namecheap parking
- Namecheap parking (162.255.119.230): a parking service. It answers for names that are typically for sale or unused.
- MX
- mx1.privateemail.commx2.privateemail.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaamsk.pro US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · two letters swappedListed by MetaMaskCloudflare
DetailsHide details for metaamsk.pro
- Domain
- metaamsk.pro
- Spelling
- Spelled like metamask.io with two letters swapped
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-10-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metaamsk.pro · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.64.190 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.187.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::ac43:bb602606:4700:3036::6815:40be
- Cloudflare
- Cloudflare (104.21.64.190, 172.67.187.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.asia HK · AS135357 · HONG KONG KOWLOON TELECOMMU…Lookalike of metamask.io · the ending .asiaListed by MetaMaskReported by PhishDestroyAddress on DomainSpoof’s phishing-host list
DetailsHide details for metamask.asia
- Domain
- metamask.asia
- Spelling
- The name of metamask.io with the ending .asia
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-10 · Chengdu West Dimension Digital Technology Co., Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.asia · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamask.asia · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 206.161.218.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask.asia resolved to it 2026-11-05 05:15 UTC
- Addresses
- 206.161.218.138 · Hong Kong · AS135357 PCCW22-HK - HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.businessLookalike of metamask.io · the ending .businessListed by MetaMaskMX present
DetailsHide details for metamask.business
- Domain
- metamask.business
- Spelling
- The name of metamask.io with the ending .business
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-08 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.business · in the feed since 2026-10-27 05:34 UTC
- MX
- heracles.mxrouting.netheracles-relay.mxrouting.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaamsk.trade US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · two letters swappedListed by MetaMaskCloudflare
DetailsHide details for metaamsk.trade
- Domain
- metaamsk.trade
- Spelling
- Spelled like metamask.io with two letters swapped
- First found
- 2026-11-01 · the day we first found it in the .trade zone file, already registered
- Registered
- 2026-10-07 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metaamsk.trade · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.43.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.185.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:b92a2606:4700:3035::6815:2bcd
- Cloudflare
- Cloudflare (104.21.43.205, 172.67.185.42): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.one GB · AS60068 · CDN77 Datacamp LimitedLookalike of metamask.io · the ending .oneListed by MetaMask
DetailsHide details for metamask.one
- Domain
- metamask.one
- Spelling
- The name of metamask.io with the ending .one
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-29 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.one · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 169.150.249.162 · United Kingdom · AS60068 CDN77 Datacamp Limited
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.camLookalike of metamask.io · the ending .camListed by MetaMaskNo address or mail server yet
DetailsHide details for metamask.cam
- Domain
- metamask.cam
- Spelling
- The name of metamask.io with the ending .cam
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-26 · Gname.com Pte. Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.cam · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.si US · AS16509 · Amazon.com, Inc.Lookalike of metamask.io · the ending .siListed by MetaMaskParking page · Dynadot parking
DetailsHide details for metamask.si
- Domain
- metamask.si
- Spelling
- The name of metamask.io with the ending .si
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-22 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.si · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 54.215.31.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Dynadot parking (parking page)
- Parking page · Dynadot parking
- Dynadot parking (54.215.31.113): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasks.social US · AS399522 · The Producers, Inc.2 addressesLookalike of metamask.io · an added character2 addresses on DomainSpoof’s phishing-host listPhishDestroy Community
DetailsHide details for metamasks.social
- Domain
- metamasks.social
- Spelling
- Spelled like metamask.io with an added character
- First found
- 2026-11-01 · the day we first found it in the .social zone file, already registered
- Registered
- 2026-09-21 · DNC Holdings, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 2 addresses on DomainSpoof’s phishing-host list
- 104.143.9.210 (metamasks.social resolved to it 2026-11-05 00:36 UTC), 104.143.9.211 (metamasks.social resolved to it 2026-11-05 00:36 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.143.9.210 · United States · AS399522 TP - The Producers, Inc.104.143.9.211 · United States · AS399522 TP - The Producers, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasks.tech CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · an added characterAddress on DomainSpoof’s phishing-host listPhishDestroy CommunityHostinger
DetailsHide details for metamasks.tech
- Domain
- metamasks.tech
- Spelling
- Spelled like metamask.io with an added character
- First found
- 2026-11-01 · the day we first found it in the .tech zone file, already registered
- Registered
- 2026-09-21 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamasks.tech resolved to it 2026-11-05 00:36 UTC
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaxk.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · a letter from a neighbouring keyAddress on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for metamaxk.com
- Domain
- metamaxk.com
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-09-08 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamaxk.com resolved to it 2026-11-04 18:03 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.ooo CN · AS45102 · Alibaba (US) Technology Co.…Lookalike of metamask.io · the ending .oooAddress on DomainSpoof’s phishing-host listAlibaba Cloud
DetailsHide details for metamask.ooo
- Domain
- metamask.ooo
- Spelling
- The name of metamask.io with the ending .ooo
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-09-01 · West263 International Limited
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 8.222.166.183 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask.ooo resolved to it 2026-11-05 05:15 UTC
- Addresses
- 8.222.166.183 · China · AS45102 ALIBABA-CN-NET - Alibaba (US) Technology Co., Ltd. · Alibaba Cloud (cloud provider)
- Alibaba Cloud
- Alibaba Cloud (8.222.166.183): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.casino US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · the ending .casinoListed by MetaMaskCloudflare
DetailsHide details for metamask.casino
- Domain
- metamask.casino
- Spelling
- The name of metamask.io with the ending .casino
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-28 · Devexpanse Ltd d/b/a Regery.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.casino · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.60.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.202.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:cac72606:4700:3033::6815:3cf2
- Cloudflare
- Cloudflare (104.21.60.242, 172.67.202.199): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamesk.icu CN · AS132203 · Tencent Building, Kejizhong…Lookalike of metamask.io · a changed characterReported by PhishDestroyAddress on DomainSpoof’s phishing-host listTencent Cloud
DetailsHide details for metamesk.icu
- Domain
- metamesk.icu
- Spelling
- Spelled like metamask.io with a changed character
- First found
- 2026-11-01 · the day we first found it in the .icu zone file, already registered
- Registered
- 2026-08-23 · Gname.com Pte. Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamesk.icu · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 43.132.222.65 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamesk.icu resolved to it 2026-11-05 00:36 UTC
- Addresses
- 43.132.222.65 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
- Tencent Cloud
- Tencent Cloud (43.132.222.65): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaamask.com SG · AS63949 · Akamai Connected Cloud3 addressesLookalike of metamask.io · a doubled letter3 addresses on DomainSpoof’s phishing-host listPhishDestroy CommunityAkamai Linode
DetailsHide details for metaamask.com
- Domain
- metaamask.com
- Spelling
- Spelled like metamask.io with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-15 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (metaamask.com resolved to it 2026-11-04 18:03 UTC), 172.232.24.235 (metaamask.com resolved to it 2026-11-04 18:03 UTC), 172.234.25.42 (metaamask.com resolved to it 2026-11-04 18:03 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.holdings SG · AS63949 · Akamai Connected Cloud3 addressesLookalike of metamask.io · the ending .holdings3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
DetailsHide details for metamask.holdings
- Domain
- metamask.holdings
- Spelling
- The name of metamask.io with the ending .holdings
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-08-11 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 3 addresses on DomainSpoof’s phishing-host list
- 172.232.24.161 (metamask.holdings resolved to it 2026-11-05 05:15 UTC), 172.232.24.235 (metamask.holdings resolved to it 2026-11-05 05:15 UTC), 172.234.25.42 (metamask.holdings resolved to it 2026-11-05 05:15 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- Addresses
- 172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
- Akamai Linode
- Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.ceo CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · the ending .ceoAddress on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for metamask.ceo
- Domain
- metamask.ceo
- Spelling
- The name of metamask.io with the ending .ceo
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-07-28 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask.ceo resolved to it 2026-11-05 05:15 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.latLookalike of metamask.io · the ending .latListed by MetaMaskNo address or mail server yet
DetailsHide details for metamask.lat
- Domain
- metamask.lat
- Spelling
- The name of metamask.io with the ending .lat
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-07-24 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.lat · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.lcLookalike of metamask.io · the ending .lcListed by MetaMaskNo address or mail server yet
DetailsHide details for metamask.lc
- Domain
- metamask.lc
- Spelling
- The name of metamask.io with the ending .lc
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-07-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.lc · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.pwLookalike of metamask.io · the ending .pwListed by MetaMaskNo address or mail server yet
DetailsHide details for metamask.pw
- Domain
- metamask.pw
- Spelling
- The name of metamask.io with the ending .pw
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-06-08 · Hefei Juming Network Technology Co., Ltd
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.pw · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.solutions US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · the ending .solutionsListed by MetaMaskCloudflareMX present
DetailsHide details for metamask.solutions
- Domain
- metamask.solutions
- Spelling
- The name of metamask.io with the ending .solutions
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-06-05 · Cloudflare, Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.solutions · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.35.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.212.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:231b2606:4700:3033::ac43:d448
- Cloudflare
- Cloudflare (104.21.35.27, 172.67.212.72): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- _dc-mx.e5e6de07db38.metamask.solutions
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasks.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · an added characterListed by MetaMaskAmazon Web Services
DetailsHide details for metamasks.xyz
- Domain
- metamasks.xyz
- Spelling
- Spelled like metamask.io with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-02 · Spaceship, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamasks.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 44.232.173.249 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)52.40.42.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (44.232.173.249, 52.40.42.113): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- supportmetamask.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · the name with an added wordAddress on DomainSpoof’s phishing-host listPhishDestroy CommunityHostinger
DetailsHide details for supportmetamask.online
- Domain
- supportmetamask.online
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-05-15 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · supportmetamask.online resolved to it 2026-11-05 00:36 UTC
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskx.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…4 addressesLookalike of metamask.io · an added characterReported by PhishDestroyHostinger CDNMX present
DetailsHide details for metamaskx.online
- Domain
- metamaskx.online
- Spelling
- Spelled like metamask.io with an added character
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-05-14 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamaskx.online · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 191.101.104.209 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)212.1.212.208 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)2a02:4780:1d:eb04:f33e:3566:2507:e5f12a02:4780:21:532:7306:9e0a:67fd:4553
- Hostinger CDN
- Hostinger CDN (191.101.104.209, 212.1.212.208): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskconnect-auth.online JP · AS7506 · GMO Internet, Inc.Lookalike of metamask.io · the name with an added wordListed by MetaMaskAddress on DomainSpoof’s phishing-host list
DetailsHide details for metamaskconnect-auth.online
- Domain
- metamaskconnect-auth.online
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-05-04 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamaskconnect-auth.online · in the feed since 2026-10-27 05:34 UTC
- Address on DomainSpoof’s phishing-host list
- 150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamaskconnect-auth.online resolved to it 2026-11-05 00:36 UTC
- Addresses
- 150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.accountants DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…13 addressesLookalike of metamask.io · the ending .accountants4 addresses on DomainSpoof’s phishing-host listPhishDestroy CommunityAmazon Web Services +1
DetailsHide details for metamask.accountants
- Domain
- metamask.accountants
- Spelling
- The name of metamask.io with the ending .accountants
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-04-27 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- 4 addresses on DomainSpoof’s phishing-host list
- 195.201.128.179 (metamask.accountants resolved to it 2026-11-05 05:15 UTC), 5.161.230.87 (metamask.accountants resolved to it 2026-11-05 05:15 UTC), 5.161.47.86 (metamask.accountants resolved to it 2026-11-05 05:15 UTC), 5.78.156.59 (metamask.accountants resolved to it 2026-11-05 05:15 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)2406:da1e:214:c901:49:871:e9e1:eb922600:1f1c:6db:8800:b98b:960a:a78f:de402a05:d014:179b:c400:6beb:a719:b479:c6082a05:d014:179b:c400:7aab:4bd9:38be:d2432a05:d014:179b:c400:a327:40ee:24cc:61802a05:d014:179b:c400:bfb2:f57d:1efe:13d92a05:d018:1d22:800:6673:f7c3:558e:5d732a05:d018:1d22:801:a216:a799:8c87:df21
- Amazon Web Services +1
- Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers. Hetzner (195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metomask.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · a changed characterReported by PhishDestroyCloudflare
DetailsHide details for metomask.org
- Domain
- metomask.org
- Spelling
- Spelled like metamask.io with a changed character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-04-21 · Spaceship, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metomask.org · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.26.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.135.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:1a642606:4700:3032::ac43:87d9
- Cloudflare
- Cloudflare (104.21.26.100, 172.67.135.217): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.fr FR · AS16276 · OVH OVH SASLookalike of metamask.io · the ending .frListed by MetaMaskOVHMX present
DetailsHide details for metamask.fr
- Domain
- metamask.fr
- Spelling
- The name of metamask.io with the ending .fr
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-04-12 · OVH
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.fr · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 213.186.33.5 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
- OVH
- OVH (213.186.33.5): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx1.mail.ovh.netmx2.mail.ovh.netmx3.mail.ovh.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.site US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .siteListed by MetaMaskParking page · Afternic
DetailsHide details for metamask.site
- Domain
- metamask.site
- Spelling
- The name of metamask.io with the ending .site
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-03-01 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.site · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamask.site to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.shop US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .shopListed by MetaMaskParking page · Afternic
DetailsHide details for metamask.shop
- Domain
- metamask.shop
- Spelling
- The name of metamask.io with the ending .shop
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-02-26 · Dynadot Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.shop · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamask.shop to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.community US · AS13335 · Cloudflare, Inc.2 addressesLookalike of metamask.io · the ending .communityListed by MetaMaskCloudflare
DetailsHide details for metamask.community
- Domain
- metamask.community
- Spelling
- The name of metamask.io with the ending .community
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-01-08 · Tucows Domains Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.community · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 23.227.38.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2620:127:f00f:b::
- Cloudflare
- Cloudflare (23.227.38.71): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.cz CZ · AS39392 · SuperNetwork SH.cz s.r.o.Lookalike of metamask.io · the ending .czListed by MetaMaskMX present
DetailsHide details for metamask.cz
- Domain
- metamask.cz
- Spelling
- The name of metamask.io with the ending .cz
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-12-31 · Gransy s.r.o.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.cz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 95.168.209.68 · Czechia · AS39392 SuperNetwork SH.cz s.r.o.
- MX
- mail.vas-hosting.cz
- Daily check
- Ended 2026-11-04 22:41 UTC
- smetamask.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · an added characterAddress on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for smetamask.online
- Domain
- smetamask.online
- Spelling
- Spelled like metamask.io with an added character
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2025-12-23 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smetamask.online resolved to it 2026-11-05 00:36 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamas.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · a dropped letterAddress on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for metamas.site
- Domain
- metamas.site
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-12-11 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamas.site resolved to it 2026-11-04 18:03 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.privateemail.commx2.privateemail.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.socialLookalike of metamask.io · the ending .socialListed by MetaMaskNo address or mail server yet
DetailsHide details for metamask.social
- Domain
- metamask.social
- Spelling
- The name of metamask.io with the ending .social
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-12-08 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.social · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.claims 127.0.0.127Lookalike of metamask.io · the ending .claimsListed by MetaMask
DetailsHide details for metamask.claims
- Domain
- metamask.claims
- Spelling
- The name of metamask.io with the ending .claims
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-12-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.claims · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 127.0.0.127
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasks.org US · AS26337 · Oso Grande IP Services, LLCLookalike of metamask.io · an added characterListed by MetaMask
DetailsHide details for metamasks.org
- Domain
- metamasks.org
- Spelling
- Spelled like metamask.io with an added character
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2025-12-02 · Network Solutions, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamasks.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 206.188.193.225 · United States · AS26337 OIS1 - Oso Grande IP Services, LLC
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.biz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .bizListed by MetaMaskParking page · Afternic
DetailsHide details for metamask.biz
- Domain
- metamask.biz
- Spelling
- The name of metamask.io with the ending .biz
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-11-25 · Spaceship, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.biz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamask.biz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskhelp.app US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the name with an added wordListed by MetaMaskAmazon Web Services
DetailsHide details for metamaskhelp.app
- Domain
- metamaskhelp.app
- Spelling
- The name of metamask.io with an added word
- First found
- 2026-11-01 · the day we first found it in the .app zone file, already registered
- Registered
- 2025-10-14 · Porkbun LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamaskhelp.app · in the feed since 2026-10-28 11:36 UTC
- Addresses
- 207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- rnetarnask.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · similar-looking charactersListed by MetaMaskReported by PhishDestroyCloudflare
DetailsHide details for rnetarnask.org
- Domain
- rnetarnask.org
- Spelling
- Spelled like metamask.io with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2025-07-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · rnetarnask.org · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · rnetarnask.org · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.6.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.134.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:6132606:4700:3034::ac43:862c
- Cloudflare
- Cloudflare (104.21.6.19, 172.67.134.44): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamsk.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterListed by MetaMaskReported by PhishDestroyRegistry lookup queuedParking page · Afternic
DetailsHide details for metamsk.com
- Domain
- metamsk.com
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2025-06-04 · GoDaddy.com, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamsk.com · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamsk.com · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamsk.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.pro US · AS16509 · Amazon.com, Inc.3 addressesLookalike of metamask.io · the ending .proListed by MetaMaskAmazon Web Services
DetailsHide details for metamask.pro
- Domain
- metamask.pro
- Spelling
- The name of metamask.io with the ending .pro
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-03-23 · Porkbun LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.pro · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 207.207.210.23 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.36 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)207.207.210.50 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (207.207.210.23, 207.207.210.36, 207.207.210.50): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.work US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .workListed by MetaMaskAmazon Web ServicesMX present
DetailsHide details for metamask.work
- Domain
- metamask.work
- Spelling
- The name of metamask.io with the ending .work
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2025-01-02 · GoDaddy.com, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.work · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- MX
- metamask-work.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.cash US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .cashListed by MetaMaskParking page · Afternic
DetailsHide details for metamask.cash
- Domain
- metamask.cash
- Spelling
- The name of metamask.io with the ending .cash
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2024-11-27 · Xiamen ChinaSource Internet Service Co., Ltd
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.cash · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamask.cash to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.in DE · AS47846 · SEDO-AS SEDO GmbHLookalike of metamask.io · the ending .inReported by PhishDestroyParking page · Sedo
DetailsHide details for metamask.in
- Domain
- metamask.in
- Spelling
- The name of metamask.io with the ending .in
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2024-09-28 · Dynadot, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamask.in · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 91.195.241.232 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- The registry delegates metamask.in to Sedo’s nameservers, which answer for it. Sedo (91.195.241.232): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- etamask.ioLookalike of metamask.io · a dropped letterReported by PhishDestroy
DetailsHide details for etamask.io
- Domain
- etamask.io
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-08-16 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · etamask.io · in the feed since 2026-11-03 21:22 UTC
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamak.ioLookalike of metamask.io · a dropped letterListed by MetaMask
DetailsHide details for metamak.io
- Domain
- metamak.io
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-08-16 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamak.io · in the feed since 2026-10-27 05:34 UTC
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamas.ioLookalike of metamask.io · a dropped letterListed by MetaMask
DetailsHide details for metamas.io
- Domain
- metamas.io
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-08-16 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamas.io · in the feed since 2026-10-27 05:34 UTC
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamas.com US · AS30148 · SucuriLookalike of metamask.io · a dropped letterListed by MetaMaskRegistry lookup queuedMX present
DetailsHide details for metamas.com
- Domain
- metamas.com
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2024-04-22 · GoDaddy.com, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamas.com · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 192.124.249.10 · United States · AS30148 SUCURI-SEC - Sucuri
- MX
- metamas-com.mail.protection.outlook.com
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.id US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .idReported by PhishDestroyAmazon Web Services
DetailsHide details for metamask.id
- Domain
- metamask.id
- Spelling
- The name of metamask.io with the ending .id
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2024-04-19 · PT Jagat Informasi Solusi (int)
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamask.id · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.run US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .runListed by MetaMaskParking page · Afternic
DetailsHide details for metamask.run
- Domain
- metamask.run
- Spelling
- The name of metamask.io with the ending .run
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2024-01-02 · Xiamen ChinaSource Internet Service Co., Ltd
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.run · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamask.run to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.us US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .usListed by MetaMaskParking page · Afternic
DetailsHide details for metamask.us
- Domain
- metamask.us
- Spelling
- The name of metamask.io with the ending .us
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2023-06-26 · Spaceship, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.us · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamask.us to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mettamask.com US · AS14618 · Amazon.com, Inc.4 addressesLookalike of metamask.io · a doubled letterListed by MetaMaskParking page · HugeDomains
DetailsHide details for mettamask.com
- Domain
- mettamask.com
- Spelling
- Spelled like metamask.io with a doubled letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2023-06-11 · TurnCommerce, Inc. DBA NameBright.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · mettamask.com · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.223.25.84 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · HugeDomains (parking page)54.243.117.197 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · HugeDomains (parking page)2600:1f18:4ae:c605:dd5d:b838:5816:d7fb2600:1f18:4ae:c606:78d4:4260:db4e:aeee
- Parking page · HugeDomains
- HugeDomains (13.223.25.84, 54.243.117.197): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.ca SG · AS63949 · Akamai Connected Cloud8 addressesLookalike of metamask.io · the ending .caListed by MetaMaskParking page · Shared parking pageMX present
DetailsHide details for metamask.ca
- Domain
- metamask.ca
- Spelling
- The name of metamask.io with the ending .ca
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2023-02-01 · Namespro Solutions Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.ca · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)2600:3c03::f03c:95ff:fe00:29ca2600:3c03::f03c:95ff:fe91:5d522600:3c03::f03c:95ff:feed:4d4f2600:3c03::f03c:95ff:feed:cf2a
- Parking page · Shared parking page
- Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.mailerhost.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.co US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .coListed by MetaMaskParking page · Afternic
DetailsHide details for metamask.co
- Domain
- metamask.co
- Spelling
- The name of metamask.io with the ending .co
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2022-09-28 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.co · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamask.co to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- megamask.io US · AS29873 · Newfold Digital, Inc.Lookalike of metamask.io · a letter from a neighbouring keyListed by MetaMaskReported by PhishDestroyAddress on DomainSpoof’s phishing-host listMX present
DetailsHide details for megamask.io
- Domain
- megamask.io
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2022-07-08 · eNom, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · megamask.io · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · megamask.io · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 66.96.162.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · megamask.io resolved to it 2026-11-04 18:03 UTC
- Addresses
- 66.96.162.138 · United States · AS29873 BIZLAND-SD - Newfold Digital, Inc.
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.co.uk US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · the ending .co.ukSubdomain reported by PhishDestroyCloudflareMX present
DetailsHide details for metamask.co.uk
- Domain
- metamask.co.uk
- Spelling
- The name of metamask.io with the ending .co.uk
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2022-04-07 · Stenning Limited t/a Client Domain Management
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Subdomain reported by PhishDestroy
- Reported by PhishDestroy · ww25.metamask.co.uk under metamask.co.uk · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 104.21.54.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.141.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::6815:36b62606:4700:3034::ac43:8d07
- Cloudflare
- Cloudflare (104.21.54.182, 172.67.141.7): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mail2.quickdns.co.uk
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.to NL · AS49981 · WorldStream WorldStream B.V.2 addressesLookalike of metamask.io · the ending .toReported by PhishDestroyAddress on DomainSpoof’s phishing-host listNamecheap
DetailsHide details for metamask.to
- Domain
- metamask.to
- Spelling
- The name of metamask.io with the ending .to
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2022-04-07 · Tonic
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamask.to · in the feed since 2026-11-03 21:22 UTC
- Address on DomainSpoof’s phishing-host list
- 2.59.170.20 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask.to resolved to it 2026-11-05 05:15 UTC
- Addresses
- 2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.104.219.250.37 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
- Namecheap
- Namecheap (104.219.250.37): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of metamask.io · the ending .plListed by MetaMaskReported by PhishDestroyAddress on DomainSpoof’s phishing-host listMX present
DetailsHide details for metamask.pl
- Domain
- metamask.pl
- Spelling
- The name of metamask.io with the ending .pl
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2022-02-04 · Aftermarket.pl Limited
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.pl · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamask.pl · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask.pl resolved to it 2026-11-05 05:15 UTC
- Addresses
- 185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
- MX
- blackhole.aftermarket.pl
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasi.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a letter from a neighbouring keyListed by MetaMaskParking page · Afternic
DetailsHide details for metamasi.com
- Domain
- metamasi.com
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2021-11-04 · Sav.com, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamasi.com · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamasi.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mdtamask.io DE · AS47846 · SEDO-AS SEDO GmbHLookalike of metamask.io · a letter from a neighbouring keyListed by MetaMaskParking page · Sedo
DetailsHide details for mdtamask.io
- Domain
- mdtamask.io
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2021-10-11 · Name.com, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · mdtamask.io · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasi.io DE · AS47846 · SEDO-AS SEDO GmbHLookalike of metamask.io · a letter from a neighbouring keyListed by MetaMaskParking page · Sedo
DetailsHide details for metamasi.io
- Domain
- metamasi.io
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2021-10-11 · Name.com, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamasi.io · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamqsk.io DE · AS47846 · SEDO-AS SEDO GmbHLookalike of metamask.io · a letter from a neighbouring keyListed by MetaMaskParking page · Sedo
DetailsHide details for metamqsk.io
- Domain
- metamqsk.io
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2021-10-11 · Name.com, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamqsk.io · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.cc US · AS13335 · Cloudflare, Inc.Lookalike of metamask.io · the ending .ccListed by MetaMaskCloudflare
DetailsHide details for metamask.cc
- Domain
- metamask.cc
- Spelling
- The name of metamask.io with the ending .cc
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2020-10-20 · Gname.com Pte. Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.cc · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 172.65.211.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
- Cloudflare
- Cloudflare (172.65.211.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metanask.io AU · AS154653 · ParkLogic Pty LtdLookalike of metamask.io · a letter from a neighbouring keyListed by MetaMaskReported by PhishDestroyParking page · ParkLogicMX present
DetailsHide details for metanask.io
- Domain
- metanask.io
- Spelling
- Spelled like metamask.io with a letter from a neighbouring key
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2020-10-20 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metanask.io · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metanask.io · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates metanask.io to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.me US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .meListed by MetaMaskParking page · Afternic
DetailsHide details for metamask.me
- Domain
- metamask.me
- Spelling
- The name of metamask.io with the ending .me
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2020-09-21 · GoDaddy.com, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.me · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamask.me to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.top US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .topListed by MetaMaskParking page · Afternic
DetailsHide details for metamask.top
- Domain
- metamask.top
- Spelling
- The name of metamask.io with the ending .top
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2020-04-14 · Spaceship, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.top · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamask.top to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .xyzListed by MetaMaskAmazon Web Services
DetailsHide details for metamask.xyz
- Domain
- metamask.xyz
- Spelling
- The name of metamask.io with the ending .xyz
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2019-02-11 · NameCheap, Inc.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 44.232.173.249 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)52.40.42.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (44.232.173.249, 52.40.42.113): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.ch US · AS20473 · The Constant Company, LLC2 addressesLookalike of metamask.io · the ending .chReported by PhishDestroyParking page · NameShift
DetailsHide details for metamask.ch
- Domain
- metamask.ch
- Spelling
- The name of metamask.io with the ending .ch
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamask.ch · in the feed since 2026-11-03 21:22 UTC
- Addresses
- 5.83.210.1 · United States · AS20473 AS-VULTR - The Constant Company, LLC · NameShift (parking page)2a0e:4001:11::1
- Parking page · NameShift
- The registry delegates metamask.ch to NameShift’s nameservers, which answer for it. NameShift (5.83.210.1): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.cn US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .cnListed by MetaMaskParking page · Dan.com
DetailsHide details for metamask.cn
- Domain
- metamask.cn
- Spelling
- The name of metamask.io with the ending .cn
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.cn · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Dan.com
- The registry delegates metamask.cn to Dan.com’s nameservers, which answer for it. Dan.com: a parking service. It answers for names that are typically for sale or unused. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.co.zw US · AS53667 · FranTech SolutionsLookalike of metamask.io · the ending .co.zwListed by MetaMaskMX present
DetailsHide details for metamask.co.zw
- Domain
- metamask.co.zw
- Spelling
- The name of metamask.io with the ending .co.zw
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.co.zw · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 198.251.88.83 · United States · AS53667 PONYNET - FranTech Solutions
- MX
- metamask.co.zw
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.de DE · AS24940 · HETZNER-AS Hetzner Online G…2 addressesLookalike of metamask.io · the ending .deListed by MetaMaskReported by PhishDestroyAddress on DomainSpoof’s phishing-host listHetzner
DetailsHide details for metamask.de
- Domain
- metamask.de
- Spelling
- The name of metamask.io with the ending .de
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- The registry publishes no registration date for .de
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.de · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamask.de · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 5.9.10.75 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask.de resolved to it 2026-11-05 05:15 UTC
- Addresses
- 5.9.10.75 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)2a01:4f8:b13:1001::4
- Hetzner
- Hetzner (5.9.10.75): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.eu US · AS20473 · The Constant Company, LLC2 addressesLookalike of metamask.io · the ending .euListed by MetaMaskParking page · NameShift
DetailsHide details for metamask.eu
- Domain
- metamask.eu
- Spelling
- The name of metamask.io with the ending .eu
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.eu · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 5.83.210.1 · United States · AS20473 AS-VULTR - The Constant Company, LLC · NameShift (parking page)2a0e:4001:11::1
- Parking page · NameShift
- The registry delegates metamask.eu to NameShift’s nameservers, which answer for it. NameShift (5.83.210.1): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.imLookalike of metamask.io · the ending .imListed by MetaMaskNo address or mail server yet
DetailsHide details for metamask.im
- Domain
- metamask.im
- Spelling
- The name of metamask.io with the ending .im
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.im · in the feed since 2026-10-27 05:34 UTC
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.org.es CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · the ending .org.esAddress on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for metamask.org.es
- Domain
- metamask.org.es
- Spelling
- The name of metamask.io with the ending .org.es
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask.org.es resolved to it 2026-11-05 05:15 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.se DE · AS47846 · SEDO-AS SEDO GmbHLookalike of metamask.io · the ending .seListed by MetaMaskParking page · Sedo
DetailsHide details for metamask.se
- Domain
- metamask.se
- Spelling
- The name of metamask.io with the ending .se
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask.se · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 64.190.63.111 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- The registry delegates metamask.se to Sedo’s nameservers, which answer for it. Sedo (64.190.63.111): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.christmas US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .christmasPhishDestroy CommunitySuspicious · highAmazon Web Services
DetailsHide details for metamask.christmas
- Domain
- metamask.christmas
- Spelling
- The name of metamask.io with the ending .christmas
- First found
- 2026-11-05 · the day the .christmas zone file first listed it as a new registration
- Registered
- 2026-11-04 · Key-Systems, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasks.worksLookalike of metamask.io · an added characterPhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for metamasks.works
- Domain
- metamasks.works
- Spelling
- Spelled like metamask.io with an added character
- First found
- 2026-11-03 · the day the .works zone file first listed it as a new registration
- Registered
- 2026-11-02 · Spaceship, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-04, the day DomainSpoof first read it there. About the list
- MX
- mx1.spacemail.commx2.spacemail.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.fit RU · AS210644 · AEZA-AS AEZA GROUP LLCLookalike of metamask.io · the ending .fitPhishDestroy CommunitySuspicious · high
DetailsHide details for metamask.fit
- Domain
- metamask.fit
- Spelling
- The name of metamask.io with the ending .fit
- First found
- 2026-11-01 · the day the daily DNS check first found it registered
- Registered
- 2026-10-31 · Dynadot Inc
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 46.226.163.116 · Russia · AS210644 AEZA-AS AEZA GROUP LLC
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.xinLookalike of metamask.io · the ending .xinNo address or mail server now
DetailsHide details for metamask.xin
- Domain
- metamask.xin
- Spelling
- The name of metamask.io with the ending .xin
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-10 · GNAME.COM PTE. LTD.
- No address or mail server now
- Registered; earlier daily DNS checks found an address or mail server for the domain, the last one found neither. The label goes when it gets one again.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metalmask.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · an added characterParking page · Afternic
DetailsHide details for metalmask.xyz
- Domain
- metalmask.xyz
- Spelling
- Spelled like metamask.io with an added character
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-10-09 · GMO Internet Group, Inc. d/b/a Onamae.com
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metalmask.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- mertamask.live US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · an added characterPhishDestroy CommunitySuspicious · highCloudflareMX present
DetailsHide details for mertamask.live
- Domain
- mertamask.live
- Spelling
- Spelled like metamask.io with an added character
- First found
- 2026-11-01 · the day we first found it in the .live zone file, already registered
- Registered
- 2026-10-08 · Eranet International Limited
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.21.47.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.170.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::6815:2f522606:4700:3031::ac43:aac9
- Cloudflare
- Cloudflare (104.21.47.82, 172.67.170.201): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mail.mertamask.live
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask.toolsLookalike of metamask.io · the ending .toolsPhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for metamask.tools
- Domain
- metamask.tools
- Spelling
- The name of metamask.io with the ending .tools
- First found
- 2026-10-31 · the day the daily DNS check first found it registered
- Registered
- 2026-10-06 · Cloudflare, Inc
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain and 1 name under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-airdrop.org DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Lookalike of metamask.io · the name with the word “airdrop”PhishDestroy CommunitySuspicious · mediumParking page · ParkingCrew (Team Internet)
DetailsHide details for metamask-airdrop.org
- Domain
- metamask-airdrop.org
- Spelling
- The name of metamask.io with the word “airdrop”
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-09-26 · Hosting Concepts B.V. d/b/a Registrar.eu
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- web3-rnetamask-swap.pro US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · similar-looking charactersCloudflare
DetailsHide details for web3-rnetamask-swap.pro
- Domain
- web3-rnetamask-swap.pro
- Spelling
- Spelled like metamask.io with similar-looking characters
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-09-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Addresses
- 104.21.6.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.135.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:6a32606:4700:3037::ac43:8706
- Cloudflare
- Cloudflare (104.21.6.163, 172.67.135.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaask.dev US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterRegistry lookup queuedAmazon Web Services
DetailsHide details for metaask.dev
- Domain
- metaask.dev
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-11-01 · the day we first found it in the .dev zone file, already registered
- Registered
- 2026-08-28 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaask.co US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterAmazon Web Services
DetailsHide details for metaask.co
- Domain
- metaask.co
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-28 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaask.me US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterAmazon Web Services
DetailsHide details for metaask.me
- Domain
- metaask.me
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-28 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaask.net US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterRegistry lookup queuedAmazon Web Services
DetailsHide details for metaask.net
- Domain
- metaask.net
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-28 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaask.store US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterRegistry lookup queuedAmazon Web Services
DetailsHide details for metaask.store
- Domain
- metaask.store
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-28 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metaask.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letterRegistry lookup queuedAmazon Web Services
DetailsHide details for metaask.xyz
- Domain
- metaask.xyz
- Spelling
- Spelled like metamask.io with a dropped letter
- First found
- 2026-10-26 · the day the daily DNS check first found it registered
- Registered
- 2026-08-28 · GoDaddy.com, LLC
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
Registered domains using the name
Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches MetaMask's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.
- add-tx-metamask.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “metamask”Listed by MetaMaskAddress on DomainSpoof’s phishing-host listHostingerMX present
DetailsHide details for add-tx-metamask.online
- Domain
- add-tx-metamask.online
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .online zone file, already registered
- Registered
- 2026-10-19 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · add-tx-metamask.online · in the feed since 2026-10-27 05:34 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · add-tx-metamask.online resolved to it 2026-11-05 00:36 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-funds.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”Listed by MetaMaskCloudflare
DetailsHide details for metamask-funds.xyz
- Domain
- metamask-funds.xyz
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-10-15 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask-funds.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.38.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.219.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:26362606:4700:3036::ac43:db86
- Cloudflare
- Cloudflare (104.21.38.54, 172.67.219.134): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-wallet.helpContains “metamask”Listed by MetaMaskMX present
DetailsHide details for metamask-wallet.help
- Domain
- metamask-wallet.help
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .help zone file, already registered
- Registered
- 2026-10-07 · NameSilo, LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask-wallet.help · in the feed since 2026-10-27 05:34 UTC
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-pc.org GB · AS197574 · EXPRESSHOST ExpressHost LtdContains “metamask”Listed by MetaMaskAddress on DomainSpoof’s phishing-host list
DetailsHide details for metamask-pc.org
- Domain
- metamask-pc.org
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-10-06 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask-pc.org · in the feed since 2026-10-27 05:34 UTC
- Address on DomainSpoof’s phishing-host list
- 154.86.119.115 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask-pc.org resolved to it 2026-11-05 00:36 UTC
- Addresses
- 154.86.119.115 · United Kingdom · AS197574 EXPRESSHOST ExpressHost Ltd
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-air.org DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Contains “metamask”Listed by MetaMaskParking page · ParkingCrew (Team Internet)
DetailsHide details for metamask-air.org
- Domain
- metamask-air.org
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-09-27 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask-air.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
- Parking page · ParkingCrew (Team Internet)
- ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- app-metamask.services US · AS214036 · ULTAHOST-AS Ultahost, Inc.Contains “metamask”Listed by MetaMask
DetailsHide details for app-metamask.services
- Domain
- app-metamask.services
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .services zone file, already registered
- Registered
- 2026-09-11 · Dynadot Inc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · app-metamask.services · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 159.100.13.207 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
- Daily check
- Ended 2026-11-04 22:41 UTC
- v5-metamask.org US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”Listed by MetaMaskCloudflare
DetailsHide details for v5-metamask.org
- Domain
- v5-metamask.org
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2026-08-06 · Hosting Concepts B.V. d/b/a Registrar.eu
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · v5-metamask.org · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 104.21.78.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.214.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3032::ac43:d6422606:4700:3035::6815:4e04
- Cloudflare
- Cloudflare (104.21.78.4, 172.67.214.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- meta-mask.orgContains “meta-mask”Reported by PhishDestroyNo address or mail server now
DetailsHide details for meta-mask.org
- Domain
- meta-mask.org
- Match
- A registered domain containing “meta-mask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-07-14 · Vautron Rechenzentrum AG
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · meta-mask.org · in the feed since 2026-11-03 21:22 UTC
- No address or mail server now
- Registered; earlier daily DNS checks found an address or mail server for the domain, the last one found neither. The label goes when it gets one again.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskpro.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “metamask”Listed by MetaMaskParking page · Afternic
DetailsHide details for metamaskpro.xyz
- Domain
- metamaskpro.xyz
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2026-06-17 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamaskpro.xyz · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates metamaskpro.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-wallet.site MY · AS45839 · Shinjiru Technology Sdn BhdContains “metamask”Listed by MetaMask
DetailsHide details for metamask-wallet.site
- Domain
- metamask-wallet.site
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2026-05-04 · Gname.com Pte. Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamask-wallet.site · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 111.90.149.159 · Malaysia · AS45839 SHINJIRU-MY-AS-AP - Shinjiru Technology Sdn Bhd
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-web.asia GB · AS212701 · HOSTINUX-AS Hostinux LimitedContains “metamask”Reported by PhishDestroyAddress on DomainSpoof’s phishing-host list
DetailsHide details for metamask-web.asia
- Domain
- metamask-web.asia
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .asia zone file, already registered
- Registered
- 2026-03-21 · Global Domain Group LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamask-web.asia · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 147.45.198.180 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask-web.asia resolved to it 2026-11-05 00:36 UTC
- Addresses
- 147.45.198.180 · United Kingdom · AS212701 HOSTINUX-AS Hostinux Limited
- Daily check
- Ended 2026-11-04 22:41 UTC
- meta-mask.pro AE · AS205282 · ie-tildapublishing-1 TILDA …Contains “meta-mask”Listed by MetaMask
DetailsHide details for meta-mask.pro
- Domain
- meta-mask.pro
- Match
- A domain containing “meta-mask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .pro zone file, already registered
- Registered
- 2026-03-03 · Web Commerce Communications Limited dba WebNic.cc
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · meta-mask.pro · in the feed since 2026-10-27 05:34 UTC
- Addresses
- 194.48.203.112 · United Arab Emirates · AS205282 ie-tildapublishing-1 TILDA PLATFORM CLOUD SERVICES CO. L.L.C
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-node.site AE · AS216071 · VDSINA SERVERS TECH FZCOContains “metamask”Reported by PhishDestroyAddress on DomainSpoof’s phishing-host list
DetailsHide details for metamask-node.site
- Domain
- metamask-node.site
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .site zone file, already registered
- Registered
- 2026-01-26 · Registrar of Domain Names REG.RU LLC
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamask-node.site · in the feed since 2026-10-25 23:31 UTC
- Address on DomainSpoof’s phishing-host list
- 91.84.105.178 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask-node.site resolved to it 2026-11-05 00:36 UTC
- Addresses
- 91.84.105.178 · United Arab Emirates · AS216071 VDSINA SERVERS TECH FZCO
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskweb.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “metamask”Address on DomainSpoof’s phishing-host listHostinger
DetailsHide details for metamaskweb.site
- Domain
- metamaskweb.site
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-01-07 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamaskweb.site resolved to it 2026-11-05 00:36 UTC
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- meta-mask.tech CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “meta-mask”Address on DomainSpoof’s phishing-host listPhishDestroy CommunityHostingerMX present
DetailsHide details for meta-mask.tech
- Domain
- meta-mask.tech
- Match
- A domain containing “meta-mask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .tech zone file, already registered
- Registered
- 2026-01-06 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · meta-mask.tech resolved to it 2026-11-05 00:36 UTC
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- meta-mask.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “meta-mask”Address on DomainSpoof’s phishing-host listPhishDestroy CommunityHostinger
DetailsHide details for meta-mask.online
- Domain
- meta-mask.online
- Match
- A registered domain containing “meta-mask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2026-01-06 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · meta-mask.online resolved to it 2026-11-05 00:36 UTC
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- meta-mask.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “meta-mask”Listed by MetaMaskReported by PhishDestroyParking page · Afternic
DetailsHide details for meta-mask.xyz
- Domain
- meta-mask.xyz
- Match
- A domain containing “meta-mask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .xyz zone file, already registered
- Registered
- 2025-12-15 · GMO Internet Group, Inc. d/b/a Onamae.com
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · meta-mask.xyz · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · meta-mask.xyz · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
- Parking page · Afternic
- The registry delegates meta-mask.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskconnect.org CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “metamask”Address on DomainSpoof’s phishing-host listPhishDestroy CommunityHostinger
DetailsHide details for metamaskconnect.org
- Domain
- metamaskconnect.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2025-04-09 · HOSTINGER operations, UAB
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Address on DomainSpoof’s phishing-host list
- 2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamaskconnect.org resolved to it 2026-11-05 00:36 UTC
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
- Hostinger
- Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskofficial.support US · AS14618 · Amazon.com, Inc.Contains “metamask”Listed by MetaMaskReported by PhishDestroyAmazon Web Services
DetailsHide details for metamaskofficial.support
- Domain
- metamaskofficial.support
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .support zone file, already registered
- Registered
- 2022-02-19 · GoDaddy Online Services Cayman Islands Ltd.
- Listings
- DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
- Listed by MetaMask
- Listed by MetaMask · metamaskofficial.support · in the feed since 2026-10-27 05:34 UTC
- Reported by PhishDestroy
- Reported by PhishDestroy · metamaskofficial.support · in the feed since 2026-10-25 23:31 UTC
- Addresses
- 52.87.196.211 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (52.87.196.211): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- meta-mask.infoContains “meta-mask”PhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for meta-mask.info
- Domain
- meta-mask.info
- Match
- A registered domain containing “meta-mask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-09-22 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- MX
- aspmx.l.google.comsmtp.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-cards.app US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”Cloudflare
DetailsHide details for metamask-cards.app
- Domain
- metamask-cards.app
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2026-08-20 · Dynadot LLC.
- Addresses
- 104.21.25.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.134.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::ac43:86f62606:4700:3032::6815:19fd
- Cloudflare
- Cloudflare (104.21.25.253, 172.67.134.246): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-cards.org US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”Cloudflare
DetailsHide details for metamask-cards.org
- Domain
- metamask-cards.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-08-20 · Dynadot Inc
- Addresses
- 104.21.87.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.143.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3031::ac43:8f052606:4700:3036::6815:5772
- Cloudflare
- Cloudflare (104.21.87.114, 172.67.143.5): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskapp.info US · AS16509 · Amazon.com, Inc.2 addressesContains “metamask”PhishDestroy CommunitySuspicious · highRegistry lookup queuedAmazon Web ServicesMX present
DetailsHide details for metamaskapp.info
- Domain
- metamaskapp.info
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-07-30 · GoDaddy.com, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
- MX
- smtp.secureserver.netmailstore1.secureserver.net
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-extension.org US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”Cloudflare
DetailsHide details for metamask-extension.org
- Domain
- metamask-extension.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-07-29 · Hosting Concepts B.V. d/b/a Registrar.eu
- Addresses
- 104.21.22.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.207.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:16ed2606:4700:3035::ac43:cf98
- Cloudflare
- Cloudflare (104.21.22.237, 172.67.207.152): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-financial.helpContains “metamask”MX present
DetailsHide details for metamask-financial.help
- Domain
- metamask-financial.help
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .help zone file copy it was found in
- Registered
- 2026-07-22 · NameSilo, LLC
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamasklab.orgContains “metamask”MX present
DetailsHide details for metamasklab.org
- Domain
- metamasklab.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-05-28 · NameSilo, LLC
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskwallet.orgContains “metamask”PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for metamaskwallet.org
- Domain
- metamaskwallet.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-04-08 · NICENIC INTERNATIONAL GROUP CO., LIMITED
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- crypto-metamask.infoContains “metamask”MX present
DetailsHide details for crypto-metamask.info
- Domain
- crypto-metamask.info
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-04-02 · PDR Ltd. d/b/a PublicDomainRegistry.com
- MX
- us2.mx1.mailhostbox.comus2.mx2.mailhostbox.comus2.mx3.mailhostbox.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskwallet.topContains “metamask”PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for metamaskwallet.top
- Domain
- metamaskwallet.top
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-03 · the day we first found it in the .top zone file, already registered
- Registered
- 2026-03-27 · PDR Ltd.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskwallet.digitalContains “metamask”PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for metamaskwallet.digital
- Domain
- metamaskwallet.digital
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .digital zone file, already registered
- Registered
- 2026-03-19 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-wallet.infoContains “metamask”PhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for metamask-wallet.info
- Domain
- metamask-wallet.info
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2026-03-06 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain and 1 name under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- MX
- mailserver.purelymail.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-official.org US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”PhishDestroy CommunitySuspicious · highCloudflare
DetailsHide details for metamask-official.org
- Domain
- metamask-official.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-02-22 · CNOBIN INFORMATION TECHNOLOGY LIMITED
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.21.9.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.141.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3037::6815:91c2606:4700:3037::ac43:8d2f
- Cloudflare
- Cloudflare (104.21.9.28, 172.67.141.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-limit.site DE · AS47846 · SEDO-AS SEDO GmbHContains “metamask”Parking page · SedoMX present
DetailsHide details for metamask-limit.site
- Domain
- metamask-limit.site
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .site zone file copy it was found in
- Registered
- 2026-02-18 · NameSilo, LLC
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-limit.org DE · AS47846 · SEDO-AS SEDO GmbHContains “metamask”PhishDestroy CommunitySuspicious · mediumParking page · SedoMX present
DetailsHide details for metamask-limit.org
- Domain
- metamask-limit.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-02-16 · NameSilo, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- MX
- mx1.titan.emailmx2.titan.email
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-hq.orgContains “metamask”PhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for metamask-hq.org
- Domain
- metamask-hq.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-01-28 · Cloudflare, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- MX
- mx.zoho.eumx2.zoho.eumx3.zoho.eu
- Daily check
- Ended 2026-11-04 22:41 UTC
- web3metamask-assist.org DE · AS28753 · LEASEWEB-DE-FRA-10 Leaseweb…Contains “metamask”PhishDestroy CommunitySuspicious · highMX present
DetailsHide details for web3metamask-assist.org
- Domain
- web3metamask-assist.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-01-28 · Unstoppable Domains Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 37.1.194.109 · Germany · AS28753 LEASEWEB-DE-FRA-10 Leaseweb Deutschland GmbH
- MX
- mail.web3metamask-assist.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-wallet.tech US · AS14061 · DigitalOcean, LLC2 addressesContains “metamask”PhishDestroy CommunitySuspicious · mediumDigitalOcean
DetailsHide details for metamask-wallet.tech
- Domain
- metamask-wallet.tech
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .tech zone file, already registered
- Registered
- 2026-01-16 · Nicnames, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 159.203.143.218 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)2604:a880:800:14:0:1:225d:c000
- DigitalOcean
- DigitalOcean (159.203.143.218): a cloud provider. It rents servers and addresses to its customers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-it.networkContains “metamask”PhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for metamask-it.network
- Domain
- metamask-it.network
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .network zone file, already registered
- Registered
- 2026-01-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- MX
- aspmx1.migadu.comaspmx2.migadu.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskweb.saleContains “metamask”PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for metamaskweb.sale
- Domain
- metamaskweb.sale
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .sale zone file, already registered
- Registered
- 2026-01-14 · Name.com, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-web.orgContains “metamask”PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
DetailsHide details for metamask-web.org
- Domain
- metamask-web.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-01-10 · Name.com, Inc.
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskweb.orgContains “metamask”PhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for metamaskweb.org
- Domain
- metamaskweb.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2026-01-03 · HOSTINGER operations, UAB
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- MX
- mx1.hostinger.commx2.hostinger.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskusa.infoContains “metamask”MX present
DetailsHide details for metamaskusa.info
- Domain
- metamaskusa.info
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2025-12-29 · Name.com, Inc.
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskupdte.cfdContains “metamask”No address or mail server yet
DetailsHide details for metamaskupdte.cfd
- Domain
- metamaskupdte.cfd
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .cfd zone file copy it was found in
- Registered
- 2025-12-03 · OwnRegistrar, Inc.
- No address or mail server yet
- Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-dapps.info US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”Cloudflare
DetailsHide details for metamask-dapps.info
- Domain
- metamask-dapps.info
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .info zone file copy it was found in
- Registered
- 2025-11-20 · Dynadot Inc
- Addresses
- 104.21.39.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.148.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3035::6815:27ba2606:4700:3036::ac43:9441
- Cloudflare
- Cloudflare (104.21.39.186, 172.67.148.65): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-dapps.online US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”Cloudflare
DetailsHide details for metamask-dapps.online
- Domain
- metamask-dapps.online
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .online zone file copy it was found in
- Registered
- 2025-11-20 · Dynadot Inc
- Addresses
- 104.21.42.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.163.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3034::6815:2aa32606:4700:3037::ac43:a38a
- Cloudflare
- Cloudflare (104.21.42.163, 172.67.163.138): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-wallet.orgContains “metamask”PhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for metamask-wallet.org
- Domain
- metamask-wallet.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2025-11-10 · Web Commerce Communications Limited dba WebNic.cc
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- MX
- mx.zoho.commx2.zoho.commx3.zoho.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskconnect.app US · AS396982 · Google LLC2 addressesContains “metamask”PhishDestroy CommunitySuspicious · highGoogle CloudMX present
DetailsHide details for metamaskconnect.app
- Domain
- metamaskconnect.app
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2025-11-05 · Sav.com, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain and 2 names under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 34.76.205.124 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)2600:1901:0:51b9::
- Google Cloud
- Google Cloud (34.76.205.124): a cloud provider. It rents servers and addresses to its customers.
- MX
- mx.all-harmless.domains
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-wallet.app US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”PhishDestroy CommunitySuspicious · highCloudflareMX present
DetailsHide details for metamask-wallet.app
- Domain
- metamask-wallet.app
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .app zone file copy it was found in
- Registered
- 2025-11-01 · Porkbun LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 104.21.78.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.215.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3030::6815:4e212606:4700:3035::ac43:d762
- Cloudflare
- Cloudflare (104.21.78.33, 172.67.215.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- MX
- mx.zoho.eumx2.zoho.eumx3.zoho.eu
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskvip.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”Registry lookup queuedCloudflare
DetailsHide details for metamaskvip.xyz
- Domain
- metamaskvip.xyz
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .xyz zone file copy it was found in
- Registered
- 2025-09-13 · GoDaddy.com, LLC
- Addresses
- 104.21.39.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)172.67.146.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)2606:4700:3033::6815:278a2606:4700:3037::ac43:9218
- Cloudflare
- Cloudflare (104.21.39.138, 172.67.146.24): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskofficial.icuContains “metamask”MX present
DetailsHide details for metamaskofficial.icu
- Domain
- metamaskofficial.icu
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .icu zone file copy it was found in
- Registered
- 2025-07-08 · PDR Ltd. d/b/a PublicDomainRegistry.com
- MX
- emx.mail.ru
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskvip.org DE · AS47846 · SEDO-AS SEDO GmbHContains “metamask”PhishDestroy CommunitySuspicious · mediumParking page · Sedo
DetailsHide details for metamaskvip.org
- Domain
- metamaskvip.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2025-05-20 · NameSilo, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
- Parking page · Sedo
- Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-europe.org US · AS16509 · Amazon.com, Inc.2 addressesContains “metamask”Registry lookup queuedAmazon Web ServicesMX present
DetailsHide details for metamask-europe.org
- Domain
- metamask-europe.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2025-04-26 · GoDaddy.com, LLC
- Addresses
- 13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
- Amazon Web Services
- Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
- MX
- metamaskeurope-org02b.mail.protection.outlook.com
- Registry lookup queued
- Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
- Daily check
- Ended 2026-11-04 22:41 UTC
- meta-mask.supportContains “meta-mask”MX present
DetailsHide details for meta-mask.support
- Domain
- meta-mask.support
- Match
- A registered domain containing “meta-mask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .support zone file copy it was found in
- Registered
- 2025-01-08 · NameSilo, LLC
- MX
- metamask-support01b.mail.protection.outlook.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskno-reply.org AU · AS154653 · ParkLogic Pty LtdContains “metamask”PhishDestroy CommunitySuspicious · mediumParking page · ParkLogicMX present
DetailsHide details for metamaskno-reply.org
- Domain
- metamaskno-reply.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2024-10-09 · NameSilo, LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
- Parking page · ParkLogic
- The registry delegates metamaskno-reply.org to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
- MX
- mail.eye-mail.net
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-eu.org UA · AS56851 · VPS-UA-AS PE Skurykhin Muko…Contains “metamask”PhishDestroy CommunitySuspicious · highMX present
DetailsHide details for metamask-eu.org
- Domain
- metamask-eu.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2024-07-18 · Hosting Concepts B.V. d/b/a Registrar.eu
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 45.94.158.225 · Ukraine · AS56851 VPS-UA-AS PE Skurykhin Mukola Volodumurovuch
- MX
- metamask-eu.org
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamask-labs.org US · AS53831 · Squarespace, Inc.Contains “metamask”PhishDestroy CommunitySuspicious · highSquarespaceMX present
DetailsHide details for metamask-labs.org
- Domain
- metamask-labs.org
- Match
- A registered domain containing “metamask”, one of the names we match for MetaMask
- Zone file copy
- 2026-10-31 · the day of the .org zone file copy it was found in
- Registered
- 2024-06-23 · Squarespace Domains II LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- Addresses
- 198.185.159.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
- Squarespace
- Squarespace (198.185.159.144): a site builder. It hosts pages for anyone who signs up.
- MX
- smtp.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC
- metamaskreddit.orgContains “metamask”PhishDestroy CommunitySuspicious · mediumMX present
DetailsHide details for metamaskreddit.org
- Domain
- metamaskreddit.org
- Match
- A domain containing “metamask”, one of the names we match for MetaMask
- First found
- 2026-11-01 · the day we first found it in the .org zone file, already registered
- Registered
- 2024-03-01 · Squarespace Domains II LLC
- Suspicious
- PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
- PhishDestroy Community
- PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
- MX
- aspmx.l.google.comalt1.aspmx.l.google.comalt2.aspmx.l.google.comalt3.aspmx.l.google.comalt4.aspmx.l.google.com
- Daily check
- Ended 2026-11-04 22:41 UTC

