Security Scan Report: help--mettamacsk-org.gitbook.io

Submitted: Nov 15, 2025, 4:53:50 AMCompleted: Nov 15, 2025, 4:55:10 AMpubliccompleted
Loading additional data...

Summary

This website contacted 12 IPs in 0 countries across 4 domains to perform 45 HTTP transactions. The main domain is help--mettamacsk-org.gitbook.io.

Submitted URL: https://help--mettamacsk-org.gitbook.io/us/

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

High‑risk phishing site impersonating MetaMask; do not trust.

Risk Factors
Brand impersonation / typosquatting of MetaMask on an unranked, likely newly registered domain
Unranked low‑reputation domain (not in Cisco Umbrella top 1 M)
Domain age unknown / appears to be brand‑new
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

Metamask® Chrome Extension®: Enhancing Your Crypto Experience | Getting® started with MetaMask

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

cryptocurrency blockchain

(93%)

Domain Information

Domain 'help--mettamacsk-org.gitbook.io' uses the British Indian Ocean Territory country-code top-level domain (.io); it also runs on subdomain 'help--mettamacsk-org'. The registrable portion 'gitbook' spans 7 characters split between three vowels and four consonants. Breaking it apart gives three words: g, it, book. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://help--mettamacsk-org.gitbook.io/us/

Page Load Overview

35.42s
Total Load Time
45
HTTP Requests
4
Domains
543 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:8,116 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain93% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
93%
technology software
92%
finance banking
75%
documentation technical
33%
cryptocurrency
30%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12104.18.40.47UnknownUnknown
3104.18.40.68UnknownUnknown
3104.18.41.89UnknownUnknown
3172.64.147.188UnknownUnknown
3172.64.147.209UnknownUnknown
3172.64.146.167UnknownUnknown
32606:4700:4402::ac40:93d1UnknownUnknown
32a06:98c1:3101::ac40:93bcUnknownUnknown
32606:4700:4407::6812:282fUnknownUnknown
32606:4700:4408::6812:2844UnknownUnknown
4512--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T133241A292101F7456D778E54323EBE3E80CECAA78766C8E9F28DC96947C543707A3AD4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:+3g4R7DBNvV3xF/MTTcE7cEsN2McUFbi/M5eoPQRFHYufcTMRf+ildbc:qR7DQUildI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:217643:qQB1GUMBBkpVBagcFAMIRhxZDC0AJAnIAMgVxAI5ikQPEBYXKSBJMC6AwCANZQzDpABVIIBQLJKyqjACUhSQugpCMQgCAAgo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:a3f7c7cfc7c3c7c7
Perceptual Hash:b1cf070c0f93339b
Difference Hash:46061c1416161e1e
Wavelet Hash:23c3c7c7c3c3c383
Color Hash:#d27992

Other Hashes

Crop Resistant:46061c1416161e1e

Scan History

Scan history not available

Unable to load historical scan data