MetaMask

Crypto & web3 United Statesmetamask.ioRank 39 of the most impersonated
Cert findings · 24 h
7
Cert findings · 7 days
42
34 reported or listed · 8 on phishing hosts
Registered lookalikes
218
85 listed by a source or an address list
Official domains
6
verified from MetaMask's own sites and records

Registered lookalikes

Checked daily · 2026-11-04 22:41 UTC

Spellings of metamask.io registered to other owners (identified by nameservers, registrar and redirects), checked daily; the ones with no address or mail server yet say so. Many are parked, for sale or run by other businesses and sites with a similar name; the ones a phishing source or address list has flagged carry a label.

Some of these come from registry zone files (ICANN CZDS). Our zone data terms apply to them: no marketing use of any kind, no harassing their registrants, no high-volume registry or registrar queries.

85 of the 218 are listed by a source or resolve to a listed address, checked hourly.

  1. metamask.blogLookalike of metamask.io · the ending .blog
    Listed by MetaMaskReported by PhishDestroyMX present
    DetailsHide details for metamask.blog
    Domain
    metamask.blog
    Spelling
    The name of metamask.io with the ending .blog
    First found
    2026-11-04 · the day the .blog zone file first listed it as a new registration
    Registered
    2026-11-03 · Dynadot LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.blog · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · metamask.blog · in the feed since 2026-11-03 21:22 UTC
    MX
    webhost.dynadot.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. metamask-recover.help AM · AS212552 · BitCommand BitCommand LLCLookalike of metamask.io · the name with the word “recover”
    Listed by MetaMaskMX present
    DetailsHide details for metamask-recover.help
    Domain
    metamask-recover.help
    Spelling
    The name of metamask.io with the word “recover”
    First found
    2026-11-03 · the day the .help zone file first listed it as a new registration
    Registered
    2026-11-02 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask-recover.help · in the feed since 2026-11-03 17:48 UTC
    Addresses
    202.133.89.169 · Armenia · AS212552 BitCommand BitCommand LLC
    MX
    mail.metamask-recover.help
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. metamask.software US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · the ending .software
    Listed by MetaMaskCloudflare
    DetailsHide details for metamask.software
    Domain
    metamask.software
    Spelling
    The name of metamask.io with the ending .software
    First found
    2026-11-03 · the day the .software zone file first listed it as a new registration
    Registered
    2026-11-02 · Sav.com, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.software · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.53.252 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.221.164 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:35fc
    2606:4700:3030::ac43:dda4
    Cloudflare
    Cloudflare (104.21.53.252, 172.67.221.164): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. netamask.com US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · a letter from a neighbouring key
    Reported by PhishDestroyCloudflare
    DetailsHide details for netamask.com
    Domain
    netamask.com
    Spelling
    Spelled like metamask.io with a letter from a neighbouring key
    First found
    2026-10-30 · the day the daily DNS check first found it registered
    Registered
    2026-10-30 · Moniker Online Services LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · netamask.com · in the feed since 2026-11-01 05:42 UTC
    Addresses
    104.21.73.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.156.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:4904
    2606:4700:3037::ac43:9c06
    Cloudflare
    Cloudflare (104.21.73.4, 172.67.156.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. metamask.win US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · the ending .win
    Listed by MetaMaskCloudflare
    DetailsHide details for metamask.win
    Domain
    metamask.win
    Spelling
    The name of metamask.io with the ending .win
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-10-28 · Cloudflare, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.win · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.69.165 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.210.139 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:45a5
    2606:4700:3035::ac43:d28b
    Cloudflare
    Cloudflare (104.21.69.165, 172.67.210.139): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. metamask.cloud US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .cloud
    Listed by MetaMaskParking page · Afternic
    DetailsHide details for metamask.cloud
    Domain
    metamask.cloud
    Spelling
    The name of metamask.io with the ending .cloud
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-10-26 · Dynadot, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.cloud · in the feed since 2026-10-27 05:34 UTC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates metamask.cloud to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. metamask.mobi CN · AS45102 · Alibaba (US) Technology Co.…Lookalike of metamask.io · the ending .mobi
    Listed by MetaMaskAddress on DomainSpoof’s phishing-host listAlibaba Cloud
    DetailsHide details for metamask.mobi
    Domain
    metamask.mobi
    Spelling
    The name of metamask.io with the ending .mobi
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-10-23 · NameMart Pte. Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.mobi · in the feed since 2026-10-27 05:34 UTC
    Address on DomainSpoof’s phishing-host list
    47.237.190.182 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask.mobi resolved to it 2026-11-05 05:15 UTC
    Addresses
    47.237.190.182 · China · AS45102 ALIBABA-CN-NET - Alibaba (US) Technology Co., Ltd. · Alibaba Cloud (cloud provider)
    Alibaba Cloud
    Alibaba Cloud (47.237.190.182): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. support-metamask.info IS · AS50613 · ThorDC-AS Advania Island ehfLookalike of metamask.io · the name with the word “support”
    Address on DomainSpoof’s phishing-host listPhishDestroy CommunityMX present
    DetailsHide details for support-metamask.info
    Domain
    support-metamask.info
    Spelling
    The name of metamask.io with the word “support”
    First found
    2026-11-01 · the day we first found it in the .info zone file, already registered
    Registered
    2026-10-16 · Internet Domain Service BS Corp
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    82.221.143.1 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · support-metamask.info resolved to it 2026-11-05 00:36 UTC
    PhishDestroy Community
    PhishDestroy’s community list includes this domain and 1 name under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    82.221.143.1 · Iceland · AS50613 ThorDC-AS Advania Island ehf
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. metamasksupport.app EE · AS62005 · BV-EU-AS BlueVPS OULookalike of metamask.io · the name with an added word
    Listed by MetaMask
    DetailsHide details for metamasksupport.app
    Domain
    metamasksupport.app
    Spelling
    The name of metamask.io with an added word
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2026-10-13 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamasksupport.app · in the feed since 2026-10-27 05:34 UTC
    Addresses
    62.204.35.164 · Estonia · AS62005 BV-EU-AS BlueVPS OU
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. metamasksupport.live US · AS22612 · Namecheap, Inc.Lookalike of metamask.io · the name with an added word
    Listed by MetaMaskParking page · Namecheap parkingMX present
    DetailsHide details for metamasksupport.live
    Domain
    metamasksupport.live
    Spelling
    The name of metamask.io with an added word
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-10-13 · NameCheap, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamasksupport.live · in the feed since 2026-10-27 05:34 UTC
    Addresses
    162.255.119.230 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap parking (parking page)
    Parking page · Namecheap parking
    Namecheap parking (162.255.119.230): a parking service. It answers for names that are typically for sale or unused.
    MX
    mx1.privateemail.com
    mx2.privateemail.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. metaamsk.pro US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · two letters swapped
    Listed by MetaMaskCloudflare
    DetailsHide details for metaamsk.pro
    Domain
    metaamsk.pro
    Spelling
    Spelled like metamask.io with two letters swapped
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-10-11 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metaamsk.pro · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.64.190 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.187.96 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::ac43:bb60
    2606:4700:3036::6815:40be
    Cloudflare
    Cloudflare (104.21.64.190, 172.67.187.96): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. metamask.asia HK · AS135357 · HONG KONG KOWLOON TELECOMMU…Lookalike of metamask.io · the ending .asia
    Listed by MetaMaskReported by PhishDestroyAddress on DomainSpoof’s phishing-host list
    DetailsHide details for metamask.asia
    Domain
    metamask.asia
    Spelling
    The name of metamask.io with the ending .asia
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-10-10 · Chengdu West Dimension Digital Technology Co., Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.asia · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · metamask.asia · in the feed since 2026-10-25 23:31 UTC
    Address on DomainSpoof’s phishing-host list
    206.161.218.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask.asia resolved to it 2026-11-05 05:15 UTC
    Addresses
    206.161.218.138 · Hong Kong · AS135357 PCCW22-HK - HONG KONG KOWLOON TELECOMMUNICATIONS CO.,LIMITED
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. metamask.businessLookalike of metamask.io · the ending .business
    Listed by MetaMaskMX present
    DetailsHide details for metamask.business
    Domain
    metamask.business
    Spelling
    The name of metamask.io with the ending .business
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-10-08 · Hosting Concepts B.V. d/b/a Registrar.eu
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.business · in the feed since 2026-10-27 05:34 UTC
    MX
    heracles.mxrouting.net
    heracles-relay.mxrouting.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. metaamsk.trade US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · two letters swapped
    Listed by MetaMaskCloudflare
    DetailsHide details for metaamsk.trade
    Domain
    metaamsk.trade
    Spelling
    Spelled like metamask.io with two letters swapped
    First found
    2026-11-01 · the day we first found it in the .trade zone file, already registered
    Registered
    2026-10-07 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metaamsk.trade · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.43.205 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.185.42 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:b92a
    2606:4700:3035::6815:2bcd
    Cloudflare
    Cloudflare (104.21.43.205, 172.67.185.42): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. metamask.one GB · AS60068 · CDN77 Datacamp LimitedLookalike of metamask.io · the ending .one
    Listed by MetaMask
    DetailsHide details for metamask.one
    Domain
    metamask.one
    Spelling
    The name of metamask.io with the ending .one
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-09-29 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.one · in the feed since 2026-10-27 05:34 UTC
    Addresses
    169.150.249.162 · United Kingdom · AS60068 CDN77 Datacamp Limited
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. metamask.camLookalike of metamask.io · the ending .cam
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for metamask.cam
    Domain
    metamask.cam
    Spelling
    The name of metamask.io with the ending .cam
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-09-26 · Gname.com Pte. Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.cam · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. metamask.si US · AS16509 · Amazon.com, Inc.Lookalike of metamask.io · the ending .si
    Listed by MetaMaskParking page · Dynadot parking
    DetailsHide details for metamask.si
    Domain
    metamask.si
    Spelling
    The name of metamask.io with the ending .si
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-09-22 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.si · in the feed since 2026-10-27 05:34 UTC
    Addresses
    54.215.31.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Dynadot parking (parking page)
    Parking page · Dynadot parking
    Dynadot parking (54.215.31.113): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. metamasks.social US · AS399522 · The Producers, Inc.2 addressesLookalike of metamask.io · an added character
    2 addresses on DomainSpoof’s phishing-host listPhishDestroy Community
    DetailsHide details for metamasks.social
    Domain
    metamasks.social
    Spelling
    Spelled like metamask.io with an added character
    First found
    2026-11-01 · the day we first found it in the .social zone file, already registered
    Registered
    2026-09-21 · DNC Holdings, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    2 addresses on DomainSpoof’s phishing-host list
    104.143.9.210 (metamasks.social resolved to it 2026-11-05 00:36 UTC), 104.143.9.211 (metamasks.social resolved to it 2026-11-05 00:36 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    104.143.9.210 · United States · AS399522 TP - The Producers, Inc.
    104.143.9.211 · United States · AS399522 TP - The Producers, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. metamasks.tech CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · an added character
    Address on DomainSpoof’s phishing-host listPhishDestroy CommunityHostinger
    DetailsHide details for metamasks.tech
    Domain
    metamasks.tech
    Spelling
    Spelled like metamask.io with an added character
    First found
    2026-11-01 · the day we first found it in the .tech zone file, already registered
    Registered
    2026-09-21 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamasks.tech resolved to it 2026-11-05 00:36 UTC
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. metamaxk.com CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · a letter from a neighbouring key
    Address on DomainSpoof’s phishing-host listHostingerMX present
    DetailsHide details for metamaxk.com
    Domain
    metamaxk.com
    Spelling
    Spelled like metamask.io with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-09-08 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamaxk.com resolved to it 2026-11-04 18:03 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. metamask.ooo CN · AS45102 · Alibaba (US) Technology Co.…Lookalike of metamask.io · the ending .ooo
    Address on DomainSpoof’s phishing-host listAlibaba Cloud
    DetailsHide details for metamask.ooo
    Domain
    metamask.ooo
    Spelling
    The name of metamask.io with the ending .ooo
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-09-01 · West263 International Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    8.222.166.183 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask.ooo resolved to it 2026-11-05 05:15 UTC
    Addresses
    8.222.166.183 · China · AS45102 ALIBABA-CN-NET - Alibaba (US) Technology Co., Ltd. · Alibaba Cloud (cloud provider)
    Alibaba Cloud
    Alibaba Cloud (8.222.166.183): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. metamask.casino US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · the ending .casino
    Listed by MetaMaskCloudflare
    DetailsHide details for metamask.casino
    Domain
    metamask.casino
    Spelling
    The name of metamask.io with the ending .casino
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-08-28 · Devexpanse Ltd d/b/a Regery.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.casino · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.60.242 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.202.199 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:cac7
    2606:4700:3033::6815:3cf2
    Cloudflare
    Cloudflare (104.21.60.242, 172.67.202.199): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. metamesk.icu CN · AS132203 · Tencent Building, Kejizhong…Lookalike of metamask.io · a changed character
    Reported by PhishDestroyAddress on DomainSpoof’s phishing-host listTencent Cloud
    DetailsHide details for metamesk.icu
    Domain
    metamesk.icu
    Spelling
    Spelled like metamask.io with a changed character
    First found
    2026-11-01 · the day we first found it in the .icu zone file, already registered
    Registered
    2026-08-23 · Gname.com Pte. Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · metamesk.icu · in the feed since 2026-10-25 23:31 UTC
    Address on DomainSpoof’s phishing-host list
    43.132.222.65 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamesk.icu resolved to it 2026-11-05 00:36 UTC
    Addresses
    43.132.222.65 · China · AS132203 TENCENT-NET-AP-CN - Tencent Building, Kejizhongyi Avenue · Tencent Cloud (cloud provider)
    Tencent Cloud
    Tencent Cloud (43.132.222.65): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. metaamask.com SG · AS63949 · Akamai Connected Cloud3 addressesLookalike of metamask.io · a doubled letter
    3 addresses on DomainSpoof’s phishing-host listPhishDestroy CommunityAkamai Linode
    DetailsHide details for metaamask.com
    Domain
    metaamask.com
    Spelling
    Spelled like metamask.io with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-08-15 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (metaamask.com resolved to it 2026-11-04 18:03 UTC), 172.232.24.235 (metaamask.com resolved to it 2026-11-04 18:03 UTC), 172.234.25.42 (metaamask.com resolved to it 2026-11-04 18:03 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. metamask.holdings SG · AS63949 · Akamai Connected Cloud3 addressesLookalike of metamask.io · the ending .holdings
    3 addresses on DomainSpoof’s phishing-host listAkamai LinodeMX present
    DetailsHide details for metamask.holdings
    Domain
    metamask.holdings
    Spelling
    The name of metamask.io with the ending .holdings
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-08-11 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    3 addresses on DomainSpoof’s phishing-host list
    172.232.24.161 (metamask.holdings resolved to it 2026-11-05 05:15 UTC), 172.232.24.235 (metamask.holdings resolved to it 2026-11-05 05:15 UTC), 172.234.25.42 (metamask.holdings resolved to it 2026-11-05 05:15 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    Addresses
    172.232.24.161 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.232.24.235 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    172.234.25.42 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Akamai Linode (cloud provider)
    Akamai Linode
    Akamai Linode (172.232.24.161, 172.232.24.235, 172.234.25.42): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx1.titan.email
    mx2.titan.email
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. metamask.ceo CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · the ending .ceo
    Address on DomainSpoof’s phishing-host listHostingerMX present
    DetailsHide details for metamask.ceo
    Domain
    metamask.ceo
    Spelling
    The name of metamask.io with the ending .ceo
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-07-28 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask.ceo resolved to it 2026-11-05 05:15 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. metamask.latLookalike of metamask.io · the ending .lat
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for metamask.lat
    Domain
    metamask.lat
    Spelling
    The name of metamask.io with the ending .lat
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-07-24 · Hosting Concepts B.V. d/b/a Registrar.eu
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.lat · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. metamask.lcLookalike of metamask.io · the ending .lc
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for metamask.lc
    Domain
    metamask.lc
    Spelling
    The name of metamask.io with the ending .lc
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-07-09 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.lc · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. metamask.pwLookalike of metamask.io · the ending .pw
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for metamask.pw
    Domain
    metamask.pw
    Spelling
    The name of metamask.io with the ending .pw
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-06-08 · Hefei Juming Network Technology Co., Ltd
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.pw · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. metamask.solutions US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · the ending .solutions
    Listed by MetaMaskCloudflareMX present
    DetailsHide details for metamask.solutions
    Domain
    metamask.solutions
    Spelling
    The name of metamask.io with the ending .solutions
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-06-05 · Cloudflare, Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.solutions · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.35.27 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.212.72 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:231b
    2606:4700:3033::ac43:d448
    Cloudflare
    Cloudflare (104.21.35.27, 172.67.212.72): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    _dc-mx.e5e6de07db38.metamask.solutions
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. metamasks.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · an added character
    Listed by MetaMaskAmazon Web Services
    DetailsHide details for metamasks.xyz
    Domain
    metamasks.xyz
    Spelling
    Spelled like metamask.io with an added character
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-02 · Spaceship, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamasks.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    44.232.173.249 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    52.40.42.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (44.232.173.249, 52.40.42.113): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. supportmetamask.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · the name with an added word
    Address on DomainSpoof’s phishing-host listPhishDestroy CommunityHostinger
    DetailsHide details for supportmetamask.online
    Domain
    supportmetamask.online
    Spelling
    The name of metamask.io with an added word
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-05-15 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · supportmetamask.online resolved to it 2026-11-05 00:36 UTC
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. metamaskx.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…4 addressesLookalike of metamask.io · an added character
    Reported by PhishDestroyHostinger CDNMX present
    DetailsHide details for metamaskx.online
    Domain
    metamaskx.online
    Spelling
    Spelled like metamask.io with an added character
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-05-14 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · metamaskx.online · in the feed since 2026-10-25 23:31 UTC
    Addresses
    191.101.104.209 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)
    212.1.212.208 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger CDN (cdn)
    2a02:4780:1d:eb04:f33e:3566:2507:e5f1
    2a02:4780:21:532:7306:9e0a:67fd:4553
    Hostinger CDN
    Hostinger CDN (191.101.104.209, 212.1.212.208): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. metamaskconnect-auth.online JP · AS7506 · GMO Internet, Inc.Lookalike of metamask.io · the name with an added word
    Listed by MetaMaskAddress on DomainSpoof’s phishing-host list
    DetailsHide details for metamaskconnect-auth.online
    Domain
    metamaskconnect-auth.online
    Spelling
    The name of metamask.io with an added word
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-05-04 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamaskconnect-auth.online · in the feed since 2026-10-27 05:34 UTC
    Address on DomainSpoof’s phishing-host list
    150.95.255.38 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamaskconnect-auth.online resolved to it 2026-11-05 00:36 UTC
    Addresses
    150.95.255.38 · Japan · AS7506 GMO-I-R1 - GMO Internet, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. metamask.accountants DE · AS212317 · HETZNER-CLOUD3-AS Hetzner O…13 addressesLookalike of metamask.io · the ending .accountants
    4 addresses on DomainSpoof’s phishing-host listPhishDestroy CommunityAmazon Web Services +1
    DetailsHide details for metamask.accountants
    Domain
    metamask.accountants
    Spelling
    The name of metamask.io with the ending .accountants
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-04-27 · Domain Science Kutatási Szolgáltató Korlátolt Felelősségű Társaság
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    4 addresses on DomainSpoof’s phishing-host list
    195.201.128.179 (metamask.accountants resolved to it 2026-11-05 05:15 UTC), 5.161.230.87 (metamask.accountants resolved to it 2026-11-05 05:15 UTC), 5.161.47.86 (metamask.accountants resolved to it 2026-11-05 05:15 UTC), 5.78.156.59 (metamask.accountants resolved to it 2026-11-05 05:15 UTC) are on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    5.78.156.59 · Germany · AS212317 HETZNER-CLOUD3-AS Hetzner Online GmbH
    5.161.47.86 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    5.161.230.87 · Germany · AS213230 HETZNER-CLOUD2-AS Hetzner Online GmbH
    76.223.91.20 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    195.201.128.179 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    2406:da1e:214:c901:49:871:e9e1:eb92
    2600:1f1c:6db:8800:b98b:960a:a78f:de40
    2a05:d014:179b:c400:6beb:a719:b479:c608
    2a05:d014:179b:c400:7aab:4bd9:38be:d243
    2a05:d014:179b:c400:a327:40ee:24cc:6180
    2a05:d014:179b:c400:bfb2:f57d:1efe:13d9
    2a05:d018:1d22:800:6673:f7c3:558e:5d73
    2a05:d018:1d22:801:a216:a799:8c87:df21
    Amazon Web Services +1
    Amazon Web Services (76.223.91.20): a cloud provider. It rents servers and addresses to its customers. Hetzner (195.201.128.179): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. metomask.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · a changed character
    Reported by PhishDestroyCloudflare
    DetailsHide details for metomask.org
    Domain
    metomask.org
    Spelling
    Spelled like metamask.io with a changed character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-04-21 · Spaceship, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · metomask.org · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.26.100 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.217 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:1a64
    2606:4700:3032::ac43:87d9
    Cloudflare
    Cloudflare (104.21.26.100, 172.67.135.217): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. metamask.fr FR · AS16276 · OVH OVH SASLookalike of metamask.io · the ending .fr
    Listed by MetaMaskOVHMX present
    DetailsHide details for metamask.fr
    Domain
    metamask.fr
    Spelling
    The name of metamask.io with the ending .fr
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-04-12 · OVH
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.fr · in the feed since 2026-10-27 05:34 UTC
    Addresses
    213.186.33.5 · France · AS16276 OVH OVH SAS · OVH (cloud provider)
    OVH
    OVH (213.186.33.5): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx1.mail.ovh.net
    mx2.mail.ovh.net
    mx3.mail.ovh.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. metamask.site US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .site
    Listed by MetaMaskParking page · Afternic
    DetailsHide details for metamask.site
    Domain
    metamask.site
    Spelling
    The name of metamask.io with the ending .site
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-03-01 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.site · in the feed since 2026-10-27 05:34 UTC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates metamask.site to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. metamask.shop US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .shop
    Listed by MetaMaskParking page · Afternic
    DetailsHide details for metamask.shop
    Domain
    metamask.shop
    Spelling
    The name of metamask.io with the ending .shop
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-02-26 · Dynadot Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.shop · in the feed since 2026-10-27 05:34 UTC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates metamask.shop to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. metamask.community US · AS13335 · Cloudflare, Inc.2 addressesLookalike of metamask.io · the ending .community
    Listed by MetaMaskCloudflare
    DetailsHide details for metamask.community
    Domain
    metamask.community
    Spelling
    The name of metamask.io with the ending .community
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-01-08 · Tucows Domains Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.community · in the feed since 2026-10-27 05:34 UTC
    Addresses
    23.227.38.71 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2620:127:f00f:b::
    Cloudflare
    Cloudflare (23.227.38.71): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. metamask.cz CZ · AS39392 · SuperNetwork SH.cz s.r.o.Lookalike of metamask.io · the ending .cz
    Listed by MetaMaskMX present
    DetailsHide details for metamask.cz
    Domain
    metamask.cz
    Spelling
    The name of metamask.io with the ending .cz
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2025-12-31 · Gransy s.r.o.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.cz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    95.168.209.68 · Czechia · AS39392 SuperNetwork SH.cz s.r.o.
    MX
    mail.vas-hosting.cz
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. smetamask.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · an added character
    Address on DomainSpoof’s phishing-host listHostingerMX present
    DetailsHide details for smetamask.online
    Domain
    smetamask.online
    Spelling
    Spelled like metamask.io with an added character
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2025-12-23 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · smetamask.online resolved to it 2026-11-05 00:36 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. metamas.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · a dropped letter
    Address on DomainSpoof’s phishing-host listHostingerMX present
    DetailsHide details for metamas.site
    Domain
    metamas.site
    Spelling
    Spelled like metamask.io with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2025-12-11 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamas.site resolved to it 2026-11-04 18:03 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.privateemail.com
    mx2.privateemail.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. metamask.socialLookalike of metamask.io · the ending .social
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for metamask.social
    Domain
    metamask.social
    Spelling
    The name of metamask.io with the ending .social
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2025-12-08 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.social · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. metamask.claims 127.0.0.127Lookalike of metamask.io · the ending .claims
    Listed by MetaMask
    DetailsHide details for metamask.claims
    Domain
    metamask.claims
    Spelling
    The name of metamask.io with the ending .claims
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2025-12-04 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.claims · in the feed since 2026-10-27 05:34 UTC
    Addresses
    127.0.0.127
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. metamasks.org US · AS26337 · Oso Grande IP Services, LLCLookalike of metamask.io · an added character
    Listed by MetaMask
    DetailsHide details for metamasks.org
    Domain
    metamasks.org
    Spelling
    Spelled like metamask.io with an added character
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2025-12-02 · Network Solutions, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamasks.org · in the feed since 2026-10-27 05:34 UTC
    Addresses
    206.188.193.225 · United States · AS26337 OIS1 - Oso Grande IP Services, LLC
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. metamask.biz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .biz
    Listed by MetaMaskParking page · Afternic
    DetailsHide details for metamask.biz
    Domain
    metamask.biz
    Spelling
    The name of metamask.io with the ending .biz
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2025-11-25 · Spaceship, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.biz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates metamask.biz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. metamaskhelp.app US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the name with an added word
    Listed by MetaMaskAmazon Web Services
    DetailsHide details for metamaskhelp.app
    Domain
    metamaskhelp.app
    Spelling
    The name of metamask.io with an added word
    First found
    2026-11-01 · the day we first found it in the .app zone file, already registered
    Registered
    2025-10-14 · Porkbun LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamaskhelp.app · in the feed since 2026-10-28 11:36 UTC
    Addresses
    207.207.210.107 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.229 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (207.207.210.107, 207.207.210.229): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. rnetarnask.org US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · similar-looking characters
    Listed by MetaMaskReported by PhishDestroyCloudflare
    DetailsHide details for rnetarnask.org
    Domain
    rnetarnask.org
    Spelling
    Spelled like metamask.io with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2025-07-12 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · rnetarnask.org · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · rnetarnask.org · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.6.19 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.44 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:613
    2606:4700:3034::ac43:862c
    Cloudflare
    Cloudflare (104.21.6.19, 172.67.134.44): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. metamsk.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letter
    Listed by MetaMaskReported by PhishDestroyRegistry lookup queuedParking page · Afternic
    DetailsHide details for metamsk.com
    Domain
    metamsk.com
    Spelling
    Spelled like metamask.io with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2025-06-04 · GoDaddy.com, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamsk.com · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · metamsk.com · in the feed since 2026-10-25 23:31 UTC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates metamsk.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. metamask.pro US · AS16509 · Amazon.com, Inc.3 addressesLookalike of metamask.io · the ending .pro
    Listed by MetaMaskAmazon Web Services
    DetailsHide details for metamask.pro
    Domain
    metamask.pro
    Spelling
    The name of metamask.io with the ending .pro
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2025-03-23 · Porkbun LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.pro · in the feed since 2026-10-27 05:34 UTC
    Addresses
    207.207.210.23 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.36 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    207.207.210.50 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (207.207.210.23, 207.207.210.36, 207.207.210.50): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. metamask.work US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .work
    Listed by MetaMaskAmazon Web ServicesMX present
    DetailsHide details for metamask.work
    Domain
    metamask.work
    Spelling
    The name of metamask.io with the ending .work
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2025-01-02 · GoDaddy.com, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.work · in the feed since 2026-10-27 05:34 UTC
    Addresses
    13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
    MX
    metamask-work.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. metamask.cash US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .cash
    Listed by MetaMaskParking page · Afternic
    DetailsHide details for metamask.cash
    Domain
    metamask.cash
    Spelling
    The name of metamask.io with the ending .cash
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2024-11-27 · Xiamen ChinaSource Internet Service Co., Ltd
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.cash · in the feed since 2026-10-27 05:34 UTC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates metamask.cash to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. metamask.in DE · AS47846 · SEDO-AS SEDO GmbHLookalike of metamask.io · the ending .in
    Reported by PhishDestroyParking page · Sedo
    DetailsHide details for metamask.in
    Domain
    metamask.in
    Spelling
    The name of metamask.io with the ending .in
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2024-09-28 · Dynadot, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · metamask.in · in the feed since 2026-10-25 23:31 UTC
    Addresses
    91.195.241.232 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    The registry delegates metamask.in to Sedo’s nameservers, which answer for it. Sedo (91.195.241.232): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. etamask.ioLookalike of metamask.io · a dropped letter
    Reported by PhishDestroy
    DetailsHide details for etamask.io
    Domain
    etamask.io
    Spelling
    Spelled like metamask.io with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2024-08-16 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · etamask.io · in the feed since 2026-11-03 21:22 UTC
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. metamak.ioLookalike of metamask.io · a dropped letter
    Listed by MetaMask
    DetailsHide details for metamak.io
    Domain
    metamak.io
    Spelling
    Spelled like metamask.io with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2024-08-16 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamak.io · in the feed since 2026-10-27 05:34 UTC
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. metamas.ioLookalike of metamask.io · a dropped letter
    Listed by MetaMask
    DetailsHide details for metamas.io
    Domain
    metamas.io
    Spelling
    Spelled like metamask.io with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2024-08-16 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamas.io · in the feed since 2026-10-27 05:34 UTC
    Daily check
    Ended 2026-11-04 22:41 UTC
  58. metamas.com US · AS30148 · SucuriLookalike of metamask.io · a dropped letter
    Listed by MetaMaskRegistry lookup queuedMX present
    DetailsHide details for metamas.com
    Domain
    metamas.com
    Spelling
    Spelled like metamask.io with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2024-04-22 · GoDaddy.com, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamas.com · in the feed since 2026-10-27 05:34 UTC
    Addresses
    192.124.249.10 · United States · AS30148 SUCURI-SEC - Sucuri
    MX
    metamas-com.mail.protection.outlook.com
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  59. metamask.id US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .id
    Reported by PhishDestroyAmazon Web Services
    DetailsHide details for metamask.id
    Domain
    metamask.id
    Spelling
    The name of metamask.io with the ending .id
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2024-04-19 · PT Jagat Informasi Solusi (int)
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · metamask.id · in the feed since 2026-10-25 23:31 UTC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  60. metamask.run US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .run
    Listed by MetaMaskParking page · Afternic
    DetailsHide details for metamask.run
    Domain
    metamask.run
    Spelling
    The name of metamask.io with the ending .run
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2024-01-02 · Xiamen ChinaSource Internet Service Co., Ltd
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.run · in the feed since 2026-10-27 05:34 UTC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates metamask.run to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  61. metamask.us US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .us
    Listed by MetaMaskParking page · Afternic
    DetailsHide details for metamask.us
    Domain
    metamask.us
    Spelling
    The name of metamask.io with the ending .us
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2023-06-26 · Spaceship, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.us · in the feed since 2026-10-27 05:34 UTC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates metamask.us to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  62. mettamask.com US · AS14618 · Amazon.com, Inc.4 addressesLookalike of metamask.io · a doubled letter
    Listed by MetaMaskParking page · HugeDomains
    DetailsHide details for mettamask.com
    Domain
    mettamask.com
    Spelling
    Spelled like metamask.io with a doubled letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2023-06-11 · TurnCommerce, Inc. DBA NameBright.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · mettamask.com · in the feed since 2026-10-27 05:34 UTC
    Addresses
    13.223.25.84 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · HugeDomains (parking page)
    54.243.117.197 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · HugeDomains (parking page)
    2600:1f18:4ae:c605:dd5d:b838:5816:d7fb
    2600:1f18:4ae:c606:78d4:4260:db4e:aeee
    Parking page · HugeDomains
    HugeDomains (13.223.25.84, 54.243.117.197): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  63. metamask.ca SG · AS63949 · Akamai Connected Cloud8 addressesLookalike of metamask.io · the ending .ca
    Listed by MetaMaskParking page · Shared parking pageMX present
    DetailsHide details for metamask.ca
    Domain
    metamask.ca
    Spelling
    The name of metamask.io with the ending .ca
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2023-02-01 · Namespro Solutions Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.ca · in the feed since 2026-10-27 05:34 UTC
    Addresses
    45.33.83.100 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    45.79.167.180 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    66.175.209.179 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    96.126.111.165 · Singapore · AS63949 AKAMAI-LINODE-AP - Akamai Connected Cloud · Shared parking page (parking page)
    2600:3c03::f03c:95ff:fe00:29ca
    2600:3c03::f03c:95ff:fe91:5d52
    2600:3c03::f03c:95ff:feed:4d4f
    2600:3c03::f03c:95ff:feed:cf2a
    Parking page · Shared parking page
    Shared parking page (45.33.83.100, 45.79.167.180, 66.175.209.179, 96.126.111.165): a parking service. It answers for names that are typically for sale or unused.
    MX
    mail.mailerhost.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  64. metamask.co US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .co
    Listed by MetaMaskParking page · Afternic
    DetailsHide details for metamask.co
    Domain
    metamask.co
    Spelling
    The name of metamask.io with the ending .co
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-09-28 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.co · in the feed since 2026-10-27 05:34 UTC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates metamask.co to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  65. megamask.io US · AS29873 · Newfold Digital, Inc.Lookalike of metamask.io · a letter from a neighbouring key
    Listed by MetaMaskReported by PhishDestroyAddress on DomainSpoof’s phishing-host listMX present
    DetailsHide details for megamask.io
    Domain
    megamask.io
    Spelling
    Spelled like metamask.io with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2022-07-08 · eNom, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · megamask.io · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · megamask.io · in the feed since 2026-10-25 23:31 UTC
    Address on DomainSpoof’s phishing-host list
    66.96.162.138 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · megamask.io resolved to it 2026-11-04 18:03 UTC
    Addresses
    66.96.162.138 · United States · AS29873 BIZLAND-SD - Newfold Digital, Inc.
    MX
    aspmx.l.google.com
    alt1.aspmx.l.google.com
    alt2.aspmx.l.google.com
    alt3.aspmx.l.google.com
    alt4.aspmx.l.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  66. metamask.co.uk US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · the ending .co.uk
    Subdomain reported by PhishDestroyCloudflareMX present
    DetailsHide details for metamask.co.uk
    Domain
    metamask.co.uk
    Spelling
    The name of metamask.io with the ending .co.uk
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2022-04-07 · Stenning Limited t/a Client Domain Management
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Subdomain reported by PhishDestroy
    Reported by PhishDestroy · ww25.metamask.co.uk under metamask.co.uk · in the feed since 2026-10-25 23:31 UTC
    Addresses
    104.21.54.182 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.7 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::6815:36b6
    2606:4700:3034::ac43:8d07
    Cloudflare
    Cloudflare (104.21.54.182, 172.67.141.7): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    mail2.quickdns.co.uk
    Daily check
    Ended 2026-11-04 22:41 UTC
  67. metamask.to NL · AS49981 · WorldStream WorldStream B.V.2 addressesLookalike of metamask.io · the ending .to
    Reported by PhishDestroyAddress on DomainSpoof’s phishing-host listNamecheap
    DetailsHide details for metamask.to
    Domain
    metamask.to
    Spelling
    The name of metamask.io with the ending .to
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2022-04-07 · Tonic
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · metamask.to · in the feed since 2026-11-03 21:22 UTC
    Address on DomainSpoof’s phishing-host list
    2.59.170.20 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask.to resolved to it 2026-11-05 05:15 UTC
    Addresses
    2.59.170.20 · Netherlands · AS49981 WorldStream WorldStream B.V.
    104.219.250.37 · United States · AS22612 NAMECHEAP-NET - Namecheap, Inc. · Namecheap (shared hosting)
    Namecheap
    Namecheap (104.219.250.37): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  68. metamask.pl PL · AS48707 · AS48707-OPS-PL AS48707 OPS …Lookalike of metamask.io · the ending .pl
    Listed by MetaMaskReported by PhishDestroyAddress on DomainSpoof’s phishing-host listMX present
    DetailsHide details for metamask.pl
    Domain
    metamask.pl
    Spelling
    The name of metamask.io with the ending .pl
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2022-02-04 · Aftermarket.pl Limited
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.pl · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · metamask.pl · in the feed since 2026-10-25 23:31 UTC
    Address on DomainSpoof’s phishing-host list
    185.253.212.22 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask.pl resolved to it 2026-11-05 05:15 UTC
    Addresses
    185.253.212.22 · Poland · AS48707 AS48707-OPS-PL AS48707 OPS PL sp. z o.o.
    MX
    blackhole.aftermarket.pl
    Daily check
    Ended 2026-11-04 22:41 UTC
  69. metamasi.com US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a letter from a neighbouring key
    Listed by MetaMaskParking page · Afternic
    DetailsHide details for metamasi.com
    Domain
    metamasi.com
    Spelling
    Spelled like metamask.io with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2021-11-04 · Sav.com, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamasi.com · in the feed since 2026-10-27 05:34 UTC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates metamasi.com to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  70. mdtamask.io DE · AS47846 · SEDO-AS SEDO GmbHLookalike of metamask.io · a letter from a neighbouring key
    Listed by MetaMaskParking page · Sedo
    DetailsHide details for mdtamask.io
    Domain
    mdtamask.io
    Spelling
    Spelled like metamask.io with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2021-10-11 · Name.com, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · mdtamask.io · in the feed since 2026-10-27 05:34 UTC
    Addresses
    91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  71. metamasi.io DE · AS47846 · SEDO-AS SEDO GmbHLookalike of metamask.io · a letter from a neighbouring key
    Listed by MetaMaskParking page · Sedo
    DetailsHide details for metamasi.io
    Domain
    metamasi.io
    Spelling
    Spelled like metamask.io with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2021-10-11 · Name.com, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamasi.io · in the feed since 2026-10-27 05:34 UTC
    Addresses
    91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  72. metamqsk.io DE · AS47846 · SEDO-AS SEDO GmbHLookalike of metamask.io · a letter from a neighbouring key
    Listed by MetaMaskParking page · Sedo
    DetailsHide details for metamqsk.io
    Domain
    metamqsk.io
    Spelling
    Spelled like metamask.io with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2021-10-11 · Name.com, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamqsk.io · in the feed since 2026-10-27 05:34 UTC
    Addresses
    91.195.240.94 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.94): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  73. metamask.cc US · AS13335 · Cloudflare, Inc.Lookalike of metamask.io · the ending .cc
    Listed by MetaMaskCloudflare
    DetailsHide details for metamask.cc
    Domain
    metamask.cc
    Spelling
    The name of metamask.io with the ending .cc
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2020-10-20 · Gname.com Pte. Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.cc · in the feed since 2026-10-27 05:34 UTC
    Addresses
    172.65.211.209 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    Cloudflare
    Cloudflare (172.65.211.209): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  74. metanask.io AU · AS154653 · ParkLogic Pty LtdLookalike of metamask.io · a letter from a neighbouring key
    Listed by MetaMaskReported by PhishDestroyParking page · ParkLogicMX present
    DetailsHide details for metanask.io
    Domain
    metanask.io
    Spelling
    Spelled like metamask.io with a letter from a neighbouring key
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2020-10-20 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metanask.io · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · metanask.io · in the feed since 2026-10-25 23:31 UTC
    Addresses
    162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates metanask.io to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
    MX
    mail.eye-mail.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  75. metamask.me US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .me
    Listed by MetaMaskParking page · Afternic
    DetailsHide details for metamask.me
    Domain
    metamask.me
    Spelling
    The name of metamask.io with the ending .me
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2020-09-21 · GoDaddy.com, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.me · in the feed since 2026-10-27 05:34 UTC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates metamask.me to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  76. metamask.top US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .top
    Listed by MetaMaskParking page · Afternic
    DetailsHide details for metamask.top
    Domain
    metamask.top
    Spelling
    The name of metamask.io with the ending .top
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2020-04-14 · Spaceship, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.top · in the feed since 2026-10-27 05:34 UTC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates metamask.top to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  77. metamask.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .xyz
    Listed by MetaMaskAmazon Web Services
    DetailsHide details for metamask.xyz
    Domain
    metamask.xyz
    Spelling
    The name of metamask.io with the ending .xyz
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2019-02-11 · NameCheap, Inc.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    44.232.173.249 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    52.40.42.113 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (44.232.173.249, 52.40.42.113): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  78. metamask.ch US · AS20473 · The Constant Company, LLC2 addressesLookalike of metamask.io · the ending .ch
    Reported by PhishDestroyParking page · NameShift
    DetailsHide details for metamask.ch
    Domain
    metamask.ch
    Spelling
    The name of metamask.io with the ending .ch
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · metamask.ch · in the feed since 2026-11-03 21:22 UTC
    Addresses
    5.83.210.1 · United States · AS20473 AS-VULTR - The Constant Company, LLC · NameShift (parking page)
    2a0e:4001:11::1
    Parking page · NameShift
    The registry delegates metamask.ch to NameShift’s nameservers, which answer for it. NameShift (5.83.210.1): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  79. metamask.cn US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .cn
    Listed by MetaMaskParking page · Dan.com
    DetailsHide details for metamask.cn
    Domain
    metamask.cn
    Spelling
    The name of metamask.io with the ending .cn
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.cn · in the feed since 2026-10-27 05:34 UTC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Dan.com
    The registry delegates metamask.cn to Dan.com’s nameservers, which answer for it. Dan.com: a parking service. It answers for names that are typically for sale or unused. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  80. metamask.co.zw US · AS53667 · FranTech SolutionsLookalike of metamask.io · the ending .co.zw
    Listed by MetaMaskMX present
    DetailsHide details for metamask.co.zw
    Domain
    metamask.co.zw
    Spelling
    The name of metamask.io with the ending .co.zw
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.co.zw · in the feed since 2026-10-27 05:34 UTC
    Addresses
    198.251.88.83 · United States · AS53667 PONYNET - FranTech Solutions
    MX
    metamask.co.zw
    Daily check
    Ended 2026-11-04 22:41 UTC
  81. metamask.de DE · AS24940 · HETZNER-AS Hetzner Online G…2 addressesLookalike of metamask.io · the ending .de
    Listed by MetaMaskReported by PhishDestroyAddress on DomainSpoof’s phishing-host listHetzner
    DetailsHide details for metamask.de
    Domain
    metamask.de
    Spelling
    The name of metamask.io with the ending .de
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    The registry publishes no registration date for .de
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.de · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · metamask.de · in the feed since 2026-10-25 23:31 UTC
    Address on DomainSpoof’s phishing-host list
    5.9.10.75 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask.de resolved to it 2026-11-05 05:15 UTC
    Addresses
    5.9.10.75 · Germany · AS24940 HETZNER-AS Hetzner Online GmbH · Hetzner (cloud provider)
    2a01:4f8:b13:1001::4
    Hetzner
    Hetzner (5.9.10.75): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  82. metamask.eu US · AS20473 · The Constant Company, LLC2 addressesLookalike of metamask.io · the ending .eu
    Listed by MetaMaskParking page · NameShift
    DetailsHide details for metamask.eu
    Domain
    metamask.eu
    Spelling
    The name of metamask.io with the ending .eu
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.eu · in the feed since 2026-10-27 05:34 UTC
    Addresses
    5.83.210.1 · United States · AS20473 AS-VULTR - The Constant Company, LLC · NameShift (parking page)
    2a0e:4001:11::1
    Parking page · NameShift
    The registry delegates metamask.eu to NameShift’s nameservers, which answer for it. NameShift (5.83.210.1): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  83. metamask.imLookalike of metamask.io · the ending .im
    Listed by MetaMaskNo address or mail server yet
    DetailsHide details for metamask.im
    Domain
    metamask.im
    Spelling
    The name of metamask.io with the ending .im
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.im · in the feed since 2026-10-27 05:34 UTC
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  84. metamask.org.es CY · AS47583 · AS-HOSTINGER Hostinger Inte…Lookalike of metamask.io · the ending .org.es
    Address on DomainSpoof’s phishing-host listHostingerMX present
    DetailsHide details for metamask.org.es
    Domain
    metamask.org.es
    Spelling
    The name of metamask.io with the ending .org.es
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask.org.es resolved to it 2026-11-05 05:15 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  85. metamask.se DE · AS47846 · SEDO-AS SEDO GmbHLookalike of metamask.io · the ending .se
    Listed by MetaMaskParking page · Sedo
    DetailsHide details for metamask.se
    Domain
    metamask.se
    Spelling
    The name of metamask.io with the ending .se
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask.se · in the feed since 2026-10-27 05:34 UTC
    Addresses
    64.190.63.111 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    The registry delegates metamask.se to Sedo’s nameservers, which answer for it. Sedo (64.190.63.111): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  86. metamask.christmas US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · the ending .christmas
    PhishDestroy CommunitySuspicious · highAmazon Web Services
    DetailsHide details for metamask.christmas
    Domain
    metamask.christmas
    Spelling
    The name of metamask.io with the ending .christmas
    First found
    2026-11-05 · the day the .christmas zone file first listed it as a new registration
    Registered
    2026-11-04 · Key-Systems, LLC
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  87. metamasks.worksLookalike of metamask.io · an added character
    PhishDestroy CommunitySuspicious · mediumMX present
    DetailsHide details for metamasks.works
    Domain
    metamasks.works
    Spelling
    Spelled like metamask.io with an added character
    First found
    2026-11-03 · the day the .works zone file first listed it as a new registration
    Registered
    2026-11-02 · Spaceship, Inc.
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-04, the day DomainSpoof first read it there. About the list
    MX
    mx1.spacemail.com
    mx2.spacemail.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  88. metamask.fit RU · AS210644 · AEZA-AS AEZA GROUP LLCLookalike of metamask.io · the ending .fit
    PhishDestroy CommunitySuspicious · high
    DetailsHide details for metamask.fit
    Domain
    metamask.fit
    Spelling
    The name of metamask.io with the ending .fit
    First found
    2026-11-01 · the day the daily DNS check first found it registered
    Registered
    2026-10-31 · Dynadot Inc
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    46.226.163.116 · Russia · AS210644 AEZA-AS AEZA GROUP LLC
    Daily check
    Ended 2026-11-04 22:41 UTC
  89. metamask.xinLookalike of metamask.io · the ending .xin
    No address or mail server now
    DetailsHide details for metamask.xin
    Domain
    metamask.xin
    Spelling
    The name of metamask.io with the ending .xin
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-10-10 · GNAME.COM PTE. LTD.
    No address or mail server now
    Registered; earlier daily DNS checks found an address or mail server for the domain, the last one found neither. The label goes when it gets one again.
    Daily check
    Ended 2026-11-04 22:41 UTC
  90. metalmask.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · an added character
    Parking page · Afternic
    DetailsHide details for metalmask.xyz
    Domain
    metalmask.xyz
    Spelling
    Spelled like metamask.io with an added character
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-10-09 · GMO Internet Group, Inc. d/b/a Onamae.com
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates metalmask.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  91. mertamask.live US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · an added character
    PhishDestroy CommunitySuspicious · highCloudflareMX present
    DetailsHide details for mertamask.live
    Domain
    mertamask.live
    Spelling
    Spelled like metamask.io with an added character
    First found
    2026-11-01 · the day we first found it in the .live zone file, already registered
    Registered
    2026-10-08 · Eranet International Limited
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    104.21.47.82 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.170.201 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::6815:2f52
    2606:4700:3031::ac43:aac9
    Cloudflare
    Cloudflare (104.21.47.82, 172.67.170.201): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    mail.mertamask.live
    Daily check
    Ended 2026-11-04 22:41 UTC
  92. metamask.toolsLookalike of metamask.io · the ending .tools
    PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
    DetailsHide details for metamask.tools
    Domain
    metamask.tools
    Spelling
    The name of metamask.io with the ending .tools
    First found
    2026-10-31 · the day the daily DNS check first found it registered
    Registered
    2026-10-06 · Cloudflare, Inc
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain and 1 name under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  93. metamask-airdrop.org DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Lookalike of metamask.io · the name with the word “airdrop”
    PhishDestroy CommunitySuspicious · mediumParking page · ParkingCrew (Team Internet)
    DetailsHide details for metamask-airdrop.org
    Domain
    metamask-airdrop.org
    Spelling
    The name of metamask.io with the word “airdrop”
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-09-26 · Hosting Concepts B.V. d/b/a Registrar.eu
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  94. web3-rnetamask-swap.pro US · AS13335 · Cloudflare, Inc.4 addressesLookalike of metamask.io · similar-looking characters
    Cloudflare
    DetailsHide details for web3-rnetamask-swap.pro
    Domain
    web3-rnetamask-swap.pro
    Spelling
    Spelled like metamask.io with similar-looking characters
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-09-16 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Addresses
    104.21.6.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.135.6 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:6a3
    2606:4700:3037::ac43:8706
    Cloudflare
    Cloudflare (104.21.6.163, 172.67.135.6): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  95. metaask.dev US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letter
    Registry lookup queuedAmazon Web Services
    DetailsHide details for metaask.dev
    Domain
    metaask.dev
    Spelling
    Spelled like metamask.io with a dropped letter
    First found
    2026-11-01 · the day we first found it in the .dev zone file, already registered
    Registered
    2026-08-28 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  96. metaask.co US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letter
    Amazon Web Services
    DetailsHide details for metaask.co
    Domain
    metaask.co
    Spelling
    Spelled like metamask.io with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-08-28 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  97. metaask.me US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letter
    Amazon Web Services
    DetailsHide details for metaask.me
    Domain
    metaask.me
    Spelling
    Spelled like metamask.io with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-08-28 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  98. metaask.net US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letter
    Registry lookup queuedAmazon Web Services
    DetailsHide details for metaask.net
    Domain
    metaask.net
    Spelling
    Spelled like metamask.io with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-08-28 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  99. metaask.store US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letter
    Registry lookup queuedAmazon Web Services
    DetailsHide details for metaask.store
    Domain
    metaask.store
    Spelling
    Spelled like metamask.io with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-08-28 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  100. metaask.xyz US · AS16509 · Amazon.com, Inc.2 addressesLookalike of metamask.io · a dropped letter
    Registry lookup queuedAmazon Web Services
    DetailsHide details for metaask.xyz
    Domain
    metaask.xyz
    Spelling
    Spelled like metamask.io with a dropped letter
    First found
    2026-10-26 · the day the daily DNS check first found it registered
    Registered
    2026-08-28 · GoDaddy.com, LLC
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC

Registered domains using the name

Domains from registry zone files (ICANN CZDS), checked daily like the lookalikes above. Each row says how it matches MetaMask's names. Resellers, fans and other businesses register names like these too. Our zone data terms apply to them.

  1. add-tx-metamask.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “metamask”
    Listed by MetaMaskAddress on DomainSpoof’s phishing-host listHostingerMX present
    DetailsHide details for add-tx-metamask.online
    Domain
    add-tx-metamask.online
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .online zone file, already registered
    Registered
    2026-10-19 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · add-tx-metamask.online · in the feed since 2026-10-27 05:34 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · add-tx-metamask.online resolved to it 2026-11-05 00:36 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  2. metamask-funds.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”
    Listed by MetaMaskCloudflare
    DetailsHide details for metamask-funds.xyz
    Domain
    metamask-funds.xyz
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-10-15 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask-funds.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.38.54 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.219.134 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:2636
    2606:4700:3036::ac43:db86
    Cloudflare
    Cloudflare (104.21.38.54, 172.67.219.134): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  3. metamask-wallet.helpContains “metamask”
    Listed by MetaMaskMX present
    DetailsHide details for metamask-wallet.help
    Domain
    metamask-wallet.help
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .help zone file, already registered
    Registered
    2026-10-07 · NameSilo, LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask-wallet.help · in the feed since 2026-10-27 05:34 UTC
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  4. metamask-pc.org GB · AS197574 · EXPRESSHOST ExpressHost LtdContains “metamask”
    Listed by MetaMaskAddress on DomainSpoof’s phishing-host list
    DetailsHide details for metamask-pc.org
    Domain
    metamask-pc.org
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-10-06 · Hosting Concepts B.V. d/b/a Registrar.eu
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask-pc.org · in the feed since 2026-10-27 05:34 UTC
    Address on DomainSpoof’s phishing-host list
    154.86.119.115 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask-pc.org resolved to it 2026-11-05 00:36 UTC
    Addresses
    154.86.119.115 · United Kingdom · AS197574 EXPRESSHOST ExpressHost Ltd
    Daily check
    Ended 2026-11-04 22:41 UTC
  5. metamask-air.org DE · AS206834 · TEAMINTERNET-CA-AS Team Int…Contains “metamask”
    Listed by MetaMaskParking page · ParkingCrew (Team Internet)
    DetailsHide details for metamask-air.org
    Domain
    metamask-air.org
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-09-27 · Hosting Concepts B.V. d/b/a Registrar.eu
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask-air.org · in the feed since 2026-10-27 05:34 UTC
    Addresses
    185.53.179.136 · Germany · AS206834 TEAMINTERNET-CA-AS Team Internet AG · ParkingCrew (Team Internet) (parking page)
    Parking page · ParkingCrew (Team Internet)
    ParkingCrew (Team Internet) (185.53.179.136): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  6. app-metamask.services US · AS214036 · ULTAHOST-AS Ultahost, Inc.Contains “metamask”
    Listed by MetaMask
    DetailsHide details for app-metamask.services
    Domain
    app-metamask.services
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .services zone file, already registered
    Registered
    2026-09-11 · Dynadot Inc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · app-metamask.services · in the feed since 2026-10-27 05:34 UTC
    Addresses
    159.100.13.207 · United States · AS214036 ULTAHOST-AS Ultahost, Inc.
    Daily check
    Ended 2026-11-04 22:41 UTC
  7. v5-metamask.org US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”
    Listed by MetaMaskCloudflare
    DetailsHide details for v5-metamask.org
    Domain
    v5-metamask.org
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2026-08-06 · Hosting Concepts B.V. d/b/a Registrar.eu
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · v5-metamask.org · in the feed since 2026-10-27 05:34 UTC
    Addresses
    104.21.78.4 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.214.66 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3032::ac43:d642
    2606:4700:3035::6815:4e04
    Cloudflare
    Cloudflare (104.21.78.4, 172.67.214.66): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  8. meta-mask.orgContains “meta-mask”
    Reported by PhishDestroyNo address or mail server now
    DetailsHide details for meta-mask.org
    Domain
    meta-mask.org
    Match
    A registered domain containing “meta-mask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2026-07-14 · Vautron Rechenzentrum AG
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · meta-mask.org · in the feed since 2026-11-03 21:22 UTC
    No address or mail server now
    Registered; earlier daily DNS checks found an address or mail server for the domain, the last one found neither. The label goes when it gets one again.
    Daily check
    Ended 2026-11-04 22:41 UTC
  9. metamaskpro.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “metamask”
    Listed by MetaMaskParking page · Afternic
    DetailsHide details for metamaskpro.xyz
    Domain
    metamaskpro.xyz
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2026-06-17 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamaskpro.xyz · in the feed since 2026-10-27 05:34 UTC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates metamaskpro.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  10. metamask-wallet.site MY · AS45839 · Shinjiru Technology Sdn BhdContains “metamask”
    Listed by MetaMask
    DetailsHide details for metamask-wallet.site
    Domain
    metamask-wallet.site
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .site zone file, already registered
    Registered
    2026-05-04 · Gname.com Pte. Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamask-wallet.site · in the feed since 2026-10-27 05:34 UTC
    Addresses
    111.90.149.159 · Malaysia · AS45839 SHINJIRU-MY-AS-AP - Shinjiru Technology Sdn Bhd
    Daily check
    Ended 2026-11-04 22:41 UTC
  11. metamask-web.asia GB · AS212701 · HOSTINUX-AS Hostinux LimitedContains “metamask”
    Reported by PhishDestroyAddress on DomainSpoof’s phishing-host list
    DetailsHide details for metamask-web.asia
    Domain
    metamask-web.asia
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .asia zone file, already registered
    Registered
    2026-03-21 · Global Domain Group LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · metamask-web.asia · in the feed since 2026-10-25 23:31 UTC
    Address on DomainSpoof’s phishing-host list
    147.45.198.180 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask-web.asia resolved to it 2026-11-05 00:36 UTC
    Addresses
    147.45.198.180 · United Kingdom · AS212701 HOSTINUX-AS Hostinux Limited
    Daily check
    Ended 2026-11-04 22:41 UTC
  12. meta-mask.pro AE · AS205282 · ie-tildapublishing-1 TILDA …Contains “meta-mask”
    Listed by MetaMask
    DetailsHide details for meta-mask.pro
    Domain
    meta-mask.pro
    Match
    A domain containing “meta-mask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .pro zone file, already registered
    Registered
    2026-03-03 · Web Commerce Communications Limited dba WebNic.cc
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · meta-mask.pro · in the feed since 2026-10-27 05:34 UTC
    Addresses
    194.48.203.112 · United Arab Emirates · AS205282 ie-tildapublishing-1 TILDA PLATFORM CLOUD SERVICES CO. L.L.C
    Daily check
    Ended 2026-11-04 22:41 UTC
  13. metamask-node.site AE · AS216071 · VDSINA SERVERS TECH FZCOContains “metamask”
    Reported by PhishDestroyAddress on DomainSpoof’s phishing-host list
    DetailsHide details for metamask-node.site
    Domain
    metamask-node.site
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .site zone file, already registered
    Registered
    2026-01-26 · Registrar of Domain Names REG.RU LLC
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · metamask-node.site · in the feed since 2026-10-25 23:31 UTC
    Address on DomainSpoof’s phishing-host list
    91.84.105.178 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamask-node.site resolved to it 2026-11-05 00:36 UTC
    Addresses
    91.84.105.178 · United Arab Emirates · AS216071 VDSINA SERVERS TECH FZCO
    Daily check
    Ended 2026-11-04 22:41 UTC
  14. metamaskweb.site CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “metamask”
    Address on DomainSpoof’s phishing-host listHostinger
    DetailsHide details for metamaskweb.site
    Domain
    metamaskweb.site
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .site zone file copy it was found in
    Registered
    2026-01-07 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamaskweb.site resolved to it 2026-11-05 00:36 UTC
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  15. meta-mask.tech CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “meta-mask”
    Address on DomainSpoof’s phishing-host listPhishDestroy CommunityHostingerMX present
    DetailsHide details for meta-mask.tech
    Domain
    meta-mask.tech
    Match
    A domain containing “meta-mask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .tech zone file, already registered
    Registered
    2026-01-06 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · meta-mask.tech resolved to it 2026-11-05 00:36 UTC
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    MX
    mx1.titan.email
    mx2.titan.email
    Daily check
    Ended 2026-11-04 22:41 UTC
  16. meta-mask.online CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “meta-mask”
    Address on DomainSpoof’s phishing-host listPhishDestroy CommunityHostinger
    DetailsHide details for meta-mask.online
    Domain
    meta-mask.online
    Match
    A registered domain containing “meta-mask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .online zone file copy it was found in
    Registered
    2026-01-06 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · meta-mask.online resolved to it 2026-11-05 00:36 UTC
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  17. meta-mask.xyz US · AS16509 · Amazon.com, Inc.2 addressesContains “meta-mask”
    Listed by MetaMaskReported by PhishDestroyParking page · Afternic
    DetailsHide details for meta-mask.xyz
    Domain
    meta-mask.xyz
    Match
    A domain containing “meta-mask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .xyz zone file, already registered
    Registered
    2025-12-15 · GMO Internet Group, Inc. d/b/a Onamae.com
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · meta-mask.xyz · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · meta-mask.xyz · in the feed since 2026-10-25 23:31 UTC
    Addresses
    13.248.169.48 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    76.223.54.146 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Afternic (parking page)
    Parking page · Afternic
    The registry delegates meta-mask.xyz to Afternic’s nameservers, which answer for it. Afternic (13.248.169.48, 76.223.54.146): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  18. metamaskconnect.org CY · AS47583 · AS-HOSTINGER Hostinger Inte…Contains “metamask”
    Address on DomainSpoof’s phishing-host listPhishDestroy CommunityHostinger
    DetailsHide details for metamaskconnect.org
    Domain
    metamaskconnect.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2025-04-09 · HOSTINGER operations, UAB
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Address on DomainSpoof’s phishing-host list
    2.57.91.91 is on DomainSpoof’s list of addresses that hosted confirmed phishing in the last 48 hours · metamaskconnect.org resolved to it 2026-11-05 00:36 UTC
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    2.57.91.91 · Cyprus · AS47583 AS-HOSTINGER Hostinger International Limited · Hostinger (shared hosting)
    Hostinger
    Hostinger (2.57.91.91): shared web hosting and domain registration. One address typically serves many customer sites.
    Daily check
    Ended 2026-11-04 22:41 UTC
  19. metamaskofficial.support US · AS14618 · Amazon.com, Inc.Contains “metamask”
    Listed by MetaMaskReported by PhishDestroyAmazon Web Services
    DetailsHide details for metamaskofficial.support
    Domain
    metamaskofficial.support
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .support zone file, already registered
    Registered
    2022-02-19 · GoDaddy Online Services Cayman Islands Ltd.
    Listings
    DomainSpoof matches it against the phishing feeds and address lists every hour · snapshot 2026-11-05 10:59 UTC
    Listed by MetaMask
    Listed by MetaMask · metamaskofficial.support · in the feed since 2026-10-27 05:34 UTC
    Reported by PhishDestroy
    Reported by PhishDestroy · metamaskofficial.support · in the feed since 2026-10-25 23:31 UTC
    Addresses
    52.87.196.211 · United States · AS14618 AMAZON-AES - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (52.87.196.211): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  20. meta-mask.infoContains “meta-mask”
    PhishDestroy CommunitySuspicious · mediumMX present
    DetailsHide details for meta-mask.info
    Domain
    meta-mask.info
    Match
    A registered domain containing “meta-mask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .info zone file copy it was found in
    Registered
    2026-09-22 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    MX
    aspmx.l.google.com
    smtp.google.com
    alt1.aspmx.l.google.com
    alt2.aspmx.l.google.com
    alt3.aspmx.l.google.com
    alt4.aspmx.l.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  21. metamask-cards.app US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”
    Cloudflare
    DetailsHide details for metamask-cards.app
    Domain
    metamask-cards.app
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .app zone file copy it was found in
    Registered
    2026-08-20 · Dynadot LLC.
    Addresses
    104.21.25.253 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.134.246 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::ac43:86f6
    2606:4700:3032::6815:19fd
    Cloudflare
    Cloudflare (104.21.25.253, 172.67.134.246): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  22. metamask-cards.org US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”
    Cloudflare
    DetailsHide details for metamask-cards.org
    Domain
    metamask-cards.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2026-08-20 · Dynadot Inc
    Addresses
    104.21.87.114 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.143.5 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3031::ac43:8f05
    2606:4700:3036::6815:5772
    Cloudflare
    Cloudflare (104.21.87.114, 172.67.143.5): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  23. metamaskapp.info US · AS16509 · Amazon.com, Inc.2 addressesContains “metamask”
    PhishDestroy CommunitySuspicious · highRegistry lookup queuedAmazon Web ServicesMX present
    DetailsHide details for metamaskapp.info
    Domain
    metamaskapp.info
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .info zone file copy it was found in
    Registered
    2026-07-30 · GoDaddy.com, LLC
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    3.33.130.190 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    15.197.148.33 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (3.33.130.190, 15.197.148.33): a cloud provider. It rents servers and addresses to its customers.
    MX
    smtp.secureserver.net
    mailstore1.secureserver.net
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  24. metamask-extension.org US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”
    Cloudflare
    DetailsHide details for metamask-extension.org
    Domain
    metamask-extension.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2026-07-29 · Hosting Concepts B.V. d/b/a Registrar.eu
    Addresses
    104.21.22.237 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.207.152 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:16ed
    2606:4700:3035::ac43:cf98
    Cloudflare
    Cloudflare (104.21.22.237, 172.67.207.152): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  25. metamask-financial.helpContains “metamask”
    MX present
    DetailsHide details for metamask-financial.help
    Domain
    metamask-financial.help
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .help zone file copy it was found in
    Registered
    2026-07-22 · NameSilo, LLC
    MX
    aspmx.l.google.com
    alt1.aspmx.l.google.com
    alt2.aspmx.l.google.com
    alt3.aspmx.l.google.com
    alt4.aspmx.l.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  26. metamasklab.orgContains “metamask”
    MX present
    DetailsHide details for metamasklab.org
    Domain
    metamasklab.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2026-05-28 · NameSilo, LLC
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  27. metamaskwallet.orgContains “metamask”
    PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
    DetailsHide details for metamaskwallet.org
    Domain
    metamaskwallet.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2026-04-08 · NICENIC INTERNATIONAL GROUP CO., LIMITED
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  28. crypto-metamask.infoContains “metamask”
    MX present
    DetailsHide details for crypto-metamask.info
    Domain
    crypto-metamask.info
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .info zone file copy it was found in
    Registered
    2026-04-02 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    us2.mx1.mailhostbox.com
    us2.mx2.mailhostbox.com
    us2.mx3.mailhostbox.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  29. metamaskwallet.topContains “metamask”
    PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
    DetailsHide details for metamaskwallet.top
    Domain
    metamaskwallet.top
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-03 · the day we first found it in the .top zone file, already registered
    Registered
    2026-03-27 · PDR Ltd.
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  30. metamaskwallet.digitalContains “metamask”
    PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
    DetailsHide details for metamaskwallet.digital
    Domain
    metamaskwallet.digital
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .digital zone file, already registered
    Registered
    2026-03-19 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  31. metamask-wallet.infoContains “metamask”
    PhishDestroy CommunitySuspicious · mediumMX present
    DetailsHide details for metamask-wallet.info
    Domain
    metamask-wallet.info
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .info zone file copy it was found in
    Registered
    2026-03-06 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain and 1 name under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    MX
    mailserver.purelymail.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  32. metamask-official.org US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”
    PhishDestroy CommunitySuspicious · highCloudflare
    DetailsHide details for metamask-official.org
    Domain
    metamask-official.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2026-02-22 · CNOBIN INFORMATION TECHNOLOGY LIMITED
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    104.21.9.28 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.141.47 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3037::6815:91c
    2606:4700:3037::ac43:8d2f
    Cloudflare
    Cloudflare (104.21.9.28, 172.67.141.47): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  33. metamask-limit.site DE · AS47846 · SEDO-AS SEDO GmbHContains “metamask”
    Parking page · SedoMX present
    DetailsHide details for metamask-limit.site
    Domain
    metamask-limit.site
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .site zone file copy it was found in
    Registered
    2026-02-18 · NameSilo, LLC
    Addresses
    91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
    MX
    mx1.titan.email
    mx2.titan.email
    Daily check
    Ended 2026-11-04 22:41 UTC
  34. metamask-limit.org DE · AS47846 · SEDO-AS SEDO GmbHContains “metamask”
    PhishDestroy CommunitySuspicious · mediumParking page · SedoMX present
    DetailsHide details for metamask-limit.org
    Domain
    metamask-limit.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2026-02-16 · NameSilo, LLC
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
    MX
    mx1.titan.email
    mx2.titan.email
    Daily check
    Ended 2026-11-04 22:41 UTC
  35. metamask-hq.orgContains “metamask”
    PhishDestroy CommunitySuspicious · mediumMX present
    DetailsHide details for metamask-hq.org
    Domain
    metamask-hq.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2026-01-28 · Cloudflare, Inc.
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    MX
    mx.zoho.eu
    mx2.zoho.eu
    mx3.zoho.eu
    Daily check
    Ended 2026-11-04 22:41 UTC
  36. web3metamask-assist.org DE · AS28753 · LEASEWEB-DE-FRA-10 Leaseweb…Contains “metamask”
    PhishDestroy CommunitySuspicious · highMX present
    DetailsHide details for web3metamask-assist.org
    Domain
    web3metamask-assist.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2026-01-28 · Unstoppable Domains Inc.
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    37.1.194.109 · Germany · AS28753 LEASEWEB-DE-FRA-10 Leaseweb Deutschland GmbH
    MX
    mail.web3metamask-assist.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  37. metamask-wallet.tech US · AS14061 · DigitalOcean, LLC2 addressesContains “metamask”
    PhishDestroy CommunitySuspicious · mediumDigitalOcean
    DetailsHide details for metamask-wallet.tech
    Domain
    metamask-wallet.tech
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .tech zone file, already registered
    Registered
    2026-01-16 · Nicnames, Inc.
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    159.203.143.218 · United States · AS14061 DIGITALOCEAN-ASN - DigitalOcean, LLC · DigitalOcean (cloud provider)
    2604:a880:800:14:0:1:225d:c000
    DigitalOcean
    DigitalOcean (159.203.143.218): a cloud provider. It rents servers and addresses to its customers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  38. metamask-it.networkContains “metamask”
    PhishDestroy CommunitySuspicious · mediumMX present
    DetailsHide details for metamask-it.network
    Domain
    metamask-it.network
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .network zone file, already registered
    Registered
    2026-01-15 · PDR Ltd. d/b/a PublicDomainRegistry.com
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    MX
    aspmx1.migadu.com
    aspmx2.migadu.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  39. metamaskweb.saleContains “metamask”
    PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
    DetailsHide details for metamaskweb.sale
    Domain
    metamaskweb.sale
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .sale zone file, already registered
    Registered
    2026-01-14 · Name.com, Inc.
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  40. metamask-web.orgContains “metamask”
    PhishDestroy CommunitySuspicious · mediumNo address or mail server yet
    DetailsHide details for metamask-web.org
    Domain
    metamask-web.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2026-01-10 · Name.com, Inc.
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  41. metamaskweb.orgContains “metamask”
    PhishDestroy CommunitySuspicious · mediumMX present
    DetailsHide details for metamaskweb.org
    Domain
    metamaskweb.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2026-01-03 · HOSTINGER operations, UAB
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    MX
    mx1.hostinger.com
    mx2.hostinger.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  42. metamaskusa.infoContains “metamask”
    MX present
    DetailsHide details for metamaskusa.info
    Domain
    metamaskusa.info
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .info zone file copy it was found in
    Registered
    2025-12-29 · Name.com, Inc.
    MX
    aspmx.l.google.com
    alt1.aspmx.l.google.com
    alt2.aspmx.l.google.com
    alt3.aspmx.l.google.com
    alt4.aspmx.l.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  43. metamaskupdte.cfdContains “metamask”
    No address or mail server yet
    DetailsHide details for metamaskupdte.cfd
    Domain
    metamaskupdte.cfd
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .cfd zone file copy it was found in
    Registered
    2025-12-03 · OwnRegistrar, Inc.
    No address or mail server yet
    Registered; the daily DNS check has found no address (A, AAAA) or mail server (MX) for the domain so far. The label goes when it gets one.
    Daily check
    Ended 2026-11-04 22:41 UTC
  44. metamask-dapps.info US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”
    Cloudflare
    DetailsHide details for metamask-dapps.info
    Domain
    metamask-dapps.info
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .info zone file copy it was found in
    Registered
    2025-11-20 · Dynadot Inc
    Addresses
    104.21.39.186 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.148.65 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3035::6815:27ba
    2606:4700:3036::ac43:9441
    Cloudflare
    Cloudflare (104.21.39.186, 172.67.148.65): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  45. metamask-dapps.online US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”
    Cloudflare
    DetailsHide details for metamask-dapps.online
    Domain
    metamask-dapps.online
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .online zone file copy it was found in
    Registered
    2025-11-20 · Dynadot Inc
    Addresses
    104.21.42.163 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.163.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3034::6815:2aa3
    2606:4700:3037::ac43:a38a
    Cloudflare
    Cloudflare (104.21.42.163, 172.67.163.138): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Daily check
    Ended 2026-11-04 22:41 UTC
  46. metamask-wallet.orgContains “metamask”
    PhishDestroy CommunitySuspicious · mediumMX present
    DetailsHide details for metamask-wallet.org
    Domain
    metamask-wallet.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2025-11-10 · Web Commerce Communications Limited dba WebNic.cc
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    MX
    mx.zoho.com
    mx2.zoho.com
    mx3.zoho.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  47. metamaskconnect.app US · AS396982 · Google LLC2 addressesContains “metamask”
    PhishDestroy CommunitySuspicious · highGoogle CloudMX present
    DetailsHide details for metamaskconnect.app
    Domain
    metamaskconnect.app
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .app zone file copy it was found in
    Registered
    2025-11-05 · Sav.com, LLC
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain and 2 names under it. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    34.76.205.124 · United States · AS396982 GOOGLE-CLOUD-PLATFORM - Google LLC · Google Cloud (cloud provider)
    2600:1901:0:51b9::
    Google Cloud
    Google Cloud (34.76.205.124): a cloud provider. It rents servers and addresses to its customers.
    MX
    mx.all-harmless.domains
    Daily check
    Ended 2026-11-04 22:41 UTC
  48. metamask-wallet.app US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”
    PhishDestroy CommunitySuspicious · highCloudflareMX present
    DetailsHide details for metamask-wallet.app
    Domain
    metamask-wallet.app
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .app zone file copy it was found in
    Registered
    2025-11-01 · Porkbun LLC
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    104.21.78.33 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.215.98 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3030::6815:4e21
    2606:4700:3035::ac43:d762
    Cloudflare
    Cloudflare (104.21.78.33, 172.67.215.98): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    MX
    mx.zoho.eu
    mx2.zoho.eu
    mx3.zoho.eu
    Daily check
    Ended 2026-11-04 22:41 UTC
  49. metamaskvip.xyz US · AS13335 · Cloudflare, Inc.4 addressesContains “metamask”
    Registry lookup queuedCloudflare
    DetailsHide details for metamaskvip.xyz
    Domain
    metamaskvip.xyz
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .xyz zone file copy it was found in
    Registered
    2025-09-13 · GoDaddy.com, LLC
    Addresses
    104.21.39.138 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    172.67.146.24 · United States · AS13335 CLOUDFLARENET - Cloudflare, Inc. · Cloudflare (cdn)
    2606:4700:3033::6815:278a
    2606:4700:3037::ac43:9218
    Cloudflare
    Cloudflare (104.21.39.138, 172.67.146.24): a CDN and reverse proxy. It serves the site from its own network and keeps the origin server private.
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  50. metamaskofficial.icuContains “metamask”
    MX present
    DetailsHide details for metamaskofficial.icu
    Domain
    metamaskofficial.icu
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .icu zone file copy it was found in
    Registered
    2025-07-08 · PDR Ltd. d/b/a PublicDomainRegistry.com
    MX
    emx.mail.ru
    Daily check
    Ended 2026-11-04 22:41 UTC
  51. metamaskvip.org DE · AS47846 · SEDO-AS SEDO GmbHContains “metamask”
    PhishDestroy CommunitySuspicious · mediumParking page · Sedo
    DetailsHide details for metamaskvip.org
    Domain
    metamaskvip.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2025-05-20 · NameSilo, LLC
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    91.195.240.123 · Germany · AS47846 SEDO-AS SEDO GmbH · Sedo (parking page)
    Parking page · Sedo
    Sedo (91.195.240.123): a parking service. It answers for names that are typically for sale or unused.
    Daily check
    Ended 2026-11-04 22:41 UTC
  52. metamask-europe.org US · AS16509 · Amazon.com, Inc.2 addressesContains “metamask”
    Registry lookup queuedAmazon Web ServicesMX present
    DetailsHide details for metamask-europe.org
    Domain
    metamask-europe.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2025-04-26 · GoDaddy.com, LLC
    Addresses
    13.248.243.5 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    76.223.105.230 · United States · AS16509 AMAZON-02 - Amazon.com, Inc. · Amazon Web Services (cloud provider)
    Amazon Web Services
    Amazon Web Services (13.248.243.5, 76.223.105.230): a cloud provider. It rents servers and addresses to its customers.
    MX
    metamaskeurope-org02b.mail.protection.outlook.com
    Registry lookup queued
    Listed on our completed DNS and web checks. The registry lookup (RDAP) that shows who holds the domain runs next. The label goes when it answers.
    Daily check
    Ended 2026-11-04 22:41 UTC
  53. meta-mask.supportContains “meta-mask”
    MX present
    DetailsHide details for meta-mask.support
    Domain
    meta-mask.support
    Match
    A registered domain containing “meta-mask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .support zone file copy it was found in
    Registered
    2025-01-08 · NameSilo, LLC
    MX
    metamask-support01b.mail.protection.outlook.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  54. metamaskno-reply.org AU · AS154653 · ParkLogic Pty LtdContains “metamask”
    PhishDestroy CommunitySuspicious · mediumParking page · ParkLogicMX present
    DetailsHide details for metamaskno-reply.org
    Domain
    metamaskno-reply.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2024-10-09 · NameSilo, LLC
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    162.4.84.247 · Australia · AS154653 PARKLOGICPTYLTD-AS-AP - ParkLogic Pty Ltd · ParkLogic (parking page)
    Parking page · ParkLogic
    The registry delegates metamaskno-reply.org to ParkLogic’s nameservers, which answer for it. ParkLogic (162.4.84.247): a parking service. It answers for names that are typically for sale or unused.
    MX
    mail.eye-mail.net
    Daily check
    Ended 2026-11-04 22:41 UTC
  55. metamask-eu.org UA · AS56851 · VPS-UA-AS PE Skurykhin Muko…Contains “metamask”
    PhishDestroy CommunitySuspicious · highMX present
    DetailsHide details for metamask-eu.org
    Domain
    metamask-eu.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2024-07-18 · Hosting Concepts B.V. d/b/a Registrar.eu
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    45.94.158.225 · Ukraine · AS56851 VPS-UA-AS PE Skurykhin Mukola Volodumurovuch
    MX
    metamask-eu.org
    Daily check
    Ended 2026-11-04 22:41 UTC
  56. metamask-labs.org US · AS53831 · Squarespace, Inc.Contains “metamask”
    PhishDestroy CommunitySuspicious · highSquarespaceMX present
    DetailsHide details for metamask-labs.org
    Domain
    metamask-labs.org
    Match
    A registered domain containing “metamask”, one of the names we match for MetaMask
    Zone file copy
    2026-10-31 · the day of the .org zone file copy it was found in
    Registered
    2024-06-23 · Squarespace Domains II LLC
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated high: it resolves to an address with no parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    Addresses
    198.185.159.144 · United States · AS53831 SQUARESPACE - Squarespace, Inc. · Squarespace (site builder)
    Squarespace
    Squarespace (198.185.159.144): a site builder. It hosts pages for anyone who signs up.
    MX
    smtp.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC
  57. metamaskreddit.orgContains “metamask”
    PhishDestroy CommunitySuspicious · mediumMX present
    DetailsHide details for metamaskreddit.org
    Domain
    metamaskreddit.org
    Match
    A domain containing “metamask”, one of the names we match for MetaMask
    First found
    2026-11-01 · the day we first found it in the .org zone file, already registered
    Registered
    2024-03-01 · Squarespace Domains II LLC
    Suspicious
    PhishDestroy’s community list includes it, with no phishing feed or listed address of its own yet. Rated medium: no address yet, or a parking or holding signal.
    PhishDestroy Community
    PhishDestroy’s community list includes this domain. The list combines public phishing blocklists. On the list since 2026-11-03, the day DomainSpoof first read it there. About the list
    MX
    aspmx.l.google.com
    alt1.aspmx.l.google.com
    alt2.aspmx.l.google.com
    alt3.aspmx.l.google.com
    alt4.aspmx.l.google.com
    Daily check
    Ended 2026-11-04 22:41 UTC

More brands in Crypto & web3

All brands →