insert-metamask-log.tem3[.]io
Category: Phishing And Fraud
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of insert-metamask-log.tem3[.]io
The domain insert-metamask-log.tem3[.]io appears to host a landing page themed around MetaMask, a cryptocurrency wallet and browser extension. The page title and meta description reference MetaMask login and wallet access, while the screenshot shows MetaMask branding, browser-install prompts, and wallet-style interface imagery. At the same time, the page is served from a subdomain of tem3.io rather than an official MetaMask domain, which may indicate a third-party hosted landing page rather than an authorized service endpoint.
The screenshot also suggests the page was built using the Temp3 website and landing-page platform, with visible builder branding at the top and bottom of the page. Based on the domain structure and page content, this appears to be a hosted promotional or credential-collection style page related to cryptocurrency users, rather than the primary website of a recognized wallet provider. The domain similarity data additionally indicates that the hostname may resemble a well-known retail domain, which is unusual given the page content centered on crypto wallet access.
Safety Assessment for insert-metamask-log.tem3[.]io
Multiple indicators suggest elevated risk at the time of this scan. The site was categorized by several web-classification providers as phishing or fraud-related, and 19 out of 91 security engines flagged the URL. Malware scanning also reported a malicious threat level, with the page itself and a related ingestion endpoint marked as suspicious or malicious. In addition, one blacklist database listed the site for social-engineering activity.
The content shown in the screenshot raises further concern because it uses MetaMask branding and login-oriented wording while operating from a non-official subdomain. That mismatch may indicate an attempt to imitate a cryptocurrency wallet service in order to capture credentials, wallet details, or other sensitive information. The domain also closely resembles temu.com in spelling, which may indicate look-alike abuse, even though the visible page content focuses on MetaMask rather than retail.
Taken together, the combination of phishing classifications, blacklist presence, suspicious linked resources, and brand-style presentation on an unrelated host materially increases risk. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority and is fronted by Cloudflare infrastructure, with Cloudflare nameservers and an IP associated with that network. This means traffic encryption appears to be present, but HTTPS alone does not validate the legitimacy of the content. DNSSEC appears to be unsigned, and the domain is not ranked in major popularity lists, which can be consistent with low-visibility or short-purpose campaign infrastructure.
The scanned page referenced multiple external assets from content-delivery and builder-related domains, and one related endpoint was flagged as malicious by the malware scan. The domain is a subdomain under tem3.io rather than a dedicated brand-owned domain, and the page metadata, branding, and suspicious link patterns suggest a hosted landing-page setup that may be used for deceptive campaigns. No MX record was noted in the similarity check, which can be another weak trust signal in context, though not conclusive on its own.
Share your experience with this website. Was it safe? Did you encounter any issues?