metskchroem-extsion.gitbook.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of metskchroem-extsion.gitbook.io
This domain appears to be a GitBook-hosted page presenting itself as documentation or a landing page for a "MetaMask chrome extension." The visible content uses MetaMask branding, wallet-related language, and a prominent download call-to-action, suggesting it is intended to attract users looking for the MetaMask browser wallet or related cryptocurrency tools.
Based on the subdomain structure and page layout, the content does not appear to be operated from MetaMask's primary official web presence, but rather from a third-party GitBook workspace. The domain string itself contains misspellings resembling "metamask chrome extension," which may indicate an attempt to capture traffic from users searching for the legitimate wallet extension. The page seems focused on cryptocurrency wallet promotion rather than general documentation.
Safety Assessment for metskchroem-extsion.gitbook.io
Multiple security signals raise concern at the time of this scan. The domain was flagged by 11 out of 91 security engines, with several classifying it as phishing or malicious. In addition, the malware scan identified one flagged page and one flagged outbound link/domain associated with a generic malicious object. The page content also appears to imitate MetaMask branding while being hosted on an unrelated GitBook subdomain, which may indicate a look-alike page designed to resemble a well-known cryptocurrency service.
Blacklist and threat-database results were mixed. Major content-malice blocklists shown in the scan were clean at the time of review, but the domain's IP address was listed on one mail-reputation blocklist, which is a weaker signal and does not by itself prove harmful website content. Even so, the combination of multi-engine phishing detections, suspicious branding resemblance, and a flagged external destination materially increases risk.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served through Cloudflare infrastructure on IP address 104.18.40.47 and uses a valid TLS certificate issued by Google Trust Services, expiring in August 2026. The web server is fronted by Cloudflare, and the nameservers also point to Cloudflare. DNSSEC appears to be unsigned at the time of this scan.
From a technical perspective, the presence of HTTPS only indicates encrypted transport and should not be treated as proof of legitimacy. The more notable concerns are the flagged outbound link, the GitBook-hosted delivery model for a page imitating a well-known crypto wallet brand, and the lack of stronger authenticity signals tying this page to the official MetaMask operator.
Share your experience with this website. Was it safe? Did you encounter any issues?