Security Scan Report: metamask.sale

Redirected to: https://metamask.sale/zh-CN

Submitted: Mar 22, 2026, 12:47:30 PMCompleted: Mar 22, 2026, 12:49:16 PMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 2 countries across 4 domains to perform 1 HTTP transaction. The main domain is metamask.sale and was registered NaN years ago.

Submitted URL: https://metamask.sale/developer/web3-services

Effective URL: https://metamask.sale/zh-CNRedirected

AI Security Verdict

Confirmed Scam

Confidence: 85%

9
Risk Score

Impersonates MetaMask on a brand‑new, unranked domain; likely phishing – do not provide any credentials or personal data.

Risk Factors
Brand impersonation on a mismatched, newly registered domain
Very new domain (<30 days) increases phishing likelihood
Unranked/low‑reputation domain
Highly obfuscated JavaScript (critical obfuscation score)
Domain age information unavailable

Details

Page Title

MetaMask加密钱包。买卖比特币、以太坊、Solana

Scan Type

public

Language

🇨🇳

Chinese

(60% confidence)

Category

cryptocurrency blockchain

(70%)

Domain Information

Domain 'metamask.sale' uses the .sale top-level domain without a subdomain. The second-level label 'metamask' is 8 characters long holding 3 vowels versus 5 consonants. Splitting it apart reveals 2 words: meta, mask. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://metamask.sale/developer/web3-services

Page Load Overview

33.12s
Total Load Time
188
HTTP Requests
16
Domains
13.3 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

Language Code:zh
Detection Confidence:60%
Script Type:Han
HTML Lang Attribute:zh-CN
Text Length:2,426 chars
Detector Agreement:20%

Website Classification

Primary Category

cryptocurrency blockchain70% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
70%
technology software
65%
finance banking
52%
education learning
50%
blog personal website
41%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
47103.158.191.146China
AS932XNNET LLC
4713.33.187.102New York, New York, United States
AS16509Amazon.com, Inc.
47142.251.141.72United States
4718.245.31.100United States
AS16509Amazon.com, Inc.
1884--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E594F975D100FC2FD1974CAEB97E9F76B0D2806493AA895CF2DCCB0153D5CF16A622A8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:nieKjeFTIeNjSyI4++euEcVZv5ipWSOXzI4++P07r2a5DvIeMee+FjeLTIexCZEH:nYyEOFO5Ke0ycrKGGTcb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:446334:AkiUiZKDUeDCKCCTgEHxi4gZwRAhMFIMALRXYasRBAQBEZagmAoIhwRMDFBACY0YDwgHAck6KRCgDAEJBpNIgRBDpgESwkcx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00010181c1c1c1c1
Perceptual Hash:fa0372fcf80302fc
Difference Hash:0101c93131292121
Wavelet Hash:010101d9ddcdc1c1
Color Hash:#86492d

Scan History

Scan history not available

Unable to load historical scan data