technology software

cryptocurrency

corporate

English

intercom-session-txttgas6

intercom-device-id-txttgas6

intercom-id-txttgas6

ajs_user_id

hubspotutk

__hstc

_ga_BZRZJTK1GS

_gcl_au

__hssrc

ajs_anonymous_id

__hssc

The domain name 'portfolio.metamask.io' uses the British Indian Ocean Territory country-code top-level domain (.io), featuring subdomain 'portfolio'. The registrable portion 'metamask' spans 8 characters split between 3 vowels and 5 consonants. Segmentation suggests two words: meta, mask. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

html/9a/72/9a724ef7-6ec6-4e53-afdb-68313eddb8a8_fallback.html.gz

MetaMask Portfolio

html/9a/72/9a724ef7-6ec6-4e53-afdb-68313eddb8a8.html.gz

frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=adsscriptloaderstatic/static-1.2657/bundles/pixels-release.js&cfRay=99e80d363cd73a73-FRA

frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=web-interactives-embed/static-2.4822/bundles/project.js&cfRay=9a0b104d6c8c24ed-CPH

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:112:0

default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests

sdk contentful.js/10.15.2; platform browser; os Linux;

application/vnd.contentful.delivery.v1+json

/spaces/:space/environments/:environment/entries

4077184daa03a28aa07c0f1cb62f1fddef3735a2c6da4be25de1cfa1cec2edca

bc113aee91ddfb7b0c39d64b91f27e5a5ae652699703eafc49360fa64848258f

ccc30aa4b4a04883696e833e82ec7b0b39f37213a98aad3b34f04b548ec0abbe

9802b3806dc9abac7f709f3c61c8f407a6de9e3f47d9f2befeb50ae7e269f8c1

8a25ed457c6e00eda1ceb643bda5a648b083113f87b85ea5ce979d54d210ccf1

579257cb076c3c6b8a417954b0301373f664b66d5af31ee13c2bb667a767e5aa

6cccb3610949ee02d1f504e099c27e6f7e8c78a669c8194637c2678f3c94e3d5

8c41713c6196e3ed66af1d0441f59992e5398a4dd72a4fa18526f2de4de5e244

d1825cb7a7bf2376ea37e9f321d2a61194ddfdc6550e47ae3be8c741e8e40e22

6a94842b02f5d2307c7158990b1c7811970acce5bd389392e0db1c8962765117

6f619c90fb226deb11acf7c97978616362191c30838b92a9e9c57aeac3573888

41219e9360a683bd9eacf3fda4b06055d1f24ec784c0b2ed77dc44d13a695e73

416a8e3d5516b03d29f8149e013038a6ec2fb3ec169239e998adc160b52714ad

4276ffed8e3fc3b623bfb187221cd849b68ebb05f5534b77fab6e52bccdfa86f

609b14701fa1cdfadcbe60564a94ab969cff61aa0e01f03706e2ab3360cfd4a9

f19e902c3fa737504e5822a40c9eada128c4306d8f9a68942e90d14912f28670

viewport

app-id=1438144202, app-argument=dapp://portfolio.metamask.io

apple-itunes-app

theme-color

title

View and manage your entire Web3 portfolio

description

https://portfolio.metamask.io/app_image2025.png?1

twitter:creator

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET

(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
  new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
  j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
  'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
  })(window,document,'script','dataLayer','GTM-TPKPQPG6');


    window.intercomSettings = {
      app_id: "txttgas6"
    };
  

Requests	IP Address	Location	AS Autonomous System
109	172.64.147.16	United States	AS13335CLOUDFLARENET
42	54.192.35.48	United States	AS16509AMAZON-02
13	104.18.31.173	United States	AS13335CLOUDFLARENET
4	142.251.140.168	United States	AS15169GOOGLE
4	3.174.47.131	United States	AS16509AMAZON-02
4	104.17.92.187	United States	AS13335CLOUDFLARENET
3	18.233.136.37	Ashburn, Virginia, United States	AS14618AMAZON-AES
3	44.236.186.200	Boardman, Oregon, United States	AS16509AMAZON-02
3	150.171.22.12	United States	AS8075MICROSOFT-CORP-MSN-AS-BLOCK
3	52.206.204.68	Ashburn, Virginia, United States	AS14618AMAZON-AES
109	120	-	-

Security Scan Report: portfolio.metamask.io

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History