Security Scan Report: metamask-30.gitbook.io

Redirected to:
https://metamask-30.gitbook.io/web
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 1 country across 4 domains to perform 40 HTTP transactions. The main domain is gitbook.io and was registered 12 years ago.

Submitted URL: https://metamask-30.gitbook.io

Effective URL:
https://metamask-30.gitbook.io/web
Redirected

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

Unofficial GitBook page using a homoglyph-obfuscated MetaMask brand name and the real wallet's marketing copy. No login or payment form was captured, but the brand impersonation on a non-official host is a strong phishing-adjacent signal — avoid entering any wallet or seed data.

Risk Factors (3)
Impersonation of a different entity's brand (MetaMask) on a domain it does not own
Unicode homoglyph substitution in the brand name, a known evasion technique
Unofficial GitBook subdomain (metamask-30) mimicking a major crypto wallet
Safety Factors (4)
No credential or payment form on the captured page
No Indicators of Compromise, YARA malware, IDS alerts, or malicious JavaScript behavior
Content is largely informational/documentation-style text about MetaMask
Established domain (4584 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Metđť’¶Mask | The crypto wallet for Defi, Web3 Dapps and NFTs

Scan Type

public

Domain Name Analysis

The domain name 'metamask-30.gitbook.io' uses the British Indian Ocean Territory country-code top-level domain (.io) and includes subdomain 'metamask-30'. Count 7 characters in 'gitbook' split between three vowels and 4 consonants. Word splitting yields 3 words: g, it, book. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://metamask-30.gitbook.io

Page Load Overview

2.84s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,833 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain88% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
88%
technology software
80%
documentation technical
72%
government public service
44%
education learning
32%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10104.18.40.47Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10172.64.147.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10172.64.146.167Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.18.41.89Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
404--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F1542A089110E218ADA2DE64137E3D35D08EE95B92F0903CF7DCDAE1DB860BB5795E9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:ymU5IuKLVfxU3Gr21rO56VD3IEr9Ap7YJ7FmU2W57vGPiFh4jz+KHachtdMaLr7U:ymU5IuKLVfxXovV7ALtdMaL0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:289153:TCASwCDQrjACChzMEBWwCAysp46Cp5RIGiRoKLKhEwBgAmmgwhrpgRkiFsFGInSKCAIouQAUBMhAJMBBos1RACQcyAkoYB0Y

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:8fdbc7c7c7c3c3c3
Perceptual Hash:b19c0e9c9f330766
Difference Hash:18161e14161e1e1e
Wavelet Hash:8fc3c3c3c3c3c383
Color Hash:#783a3f

Other Hashes

Crop Resistant:18161e14161e1e1e

Scan History

Scan history not available

Unable to load historical scan data