mtmskchrcmxtnsion.gitbook.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of mtmskchrcmxtnsion.gitbook.io
This domain appears to host a GitBook page presenting itself as documentation or onboarding material for the MetaMask browser extension. The page title and visible content reference "Metamask Chrome Extension" and describe wallet setup and connection steps for decentralized applications on the Ethereum network. Based on the screenshot, the site is formatted like a help or product-information page rather than a full standalone corporate website.
The page is served from a gitbook.io subdomain, which suggests it may be user-published content on GitBook rather than an official MetaMask-owned domain. The subdomain string itself does not clearly match MetaMask branding, while the page heavily uses the MetaMask name and logo. Based on the available content and naming pattern, this page appears to be related to cryptocurrency wallet onboarding and may be attempting to resemble official MetaMask documentation.
Safety Assessment for mtmskchrcmxtnsion.gitbook.io
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 15 out of 91 security engines, with the detections broadly classifying it as phishing or malicious. In addition, the page prominently uses the MetaMask brand while being hosted on an unrelated GitBook subdomain, which may indicate a look-alike page intended to resemble official wallet documentation. That kind of branding mismatch is a common warning sign for credential theft or wallet-targeting scams.
The malware file scan did not identify malicious files in the sampled page resources, but that does not offset the phishing-related detections. Phishing pages often rely on deceptive branding and social engineering rather than downloadable malware. Blacklist data was mixed: major content-malice databases shown here were clean, but the domain's IP address was listed on one mail-reputation blocklist, which is a weaker secondary signal and not, by itself, proof of harmful website content.
Taken together, the strongest indicators are the multi-engine phishing consensus, the very low trust score provided in the scan context, the lack of meaningful traffic presence, and the apparent imitation of a well-known cryptocurrency brand on a third-party publishing platform. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL certificate issued by Google Trust Services, with expiry shown in August 2026. It is hosted behind Cloudflare on IP address 104.18.40.47, with Cloudflare nameservers and web infrastructure. The use of HTTPS and a mainstream CDN/proxy setup helps with transport security, but it should not be treated as evidence of legitimacy because phishing pages commonly use the same protections.
DNSSEC appears to be unsigned. The domain age shown in WHOIS is relatively old, but because this is a gitbook.io subdomain, the age of the parent domain does not necessarily reflect the age or trustworthiness of the specific hosted page. No malicious files or flagged outbound links were identified in the page scan sample, which may suggest the primary concern is deceptive content rather than exploit delivery.
Share your experience with this website. Was it safe? Did you encounter any issues?