mtmskchrpmxtnsion.gitbook.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of mtmskchrpmxtnsion.gitbook.io
This domain appears to be a GitBook-hosted page presenting itself as documentation or a landing page for the MetaMask browser extension. The page title, branding, and visible content reference cryptocurrency wallet usage, Ethereum-based applications, and Chrome extension installation, suggesting that it is trying to attract users looking for MetaMask-related setup or wallet guidance.
Based on the screenshot and metadata, the page does not appear to be an official MetaMask domain. Instead, it is published under a gitbook.io subdomain with an unusual, non-brand-matching hostname. GitBook is commonly used for documentation hosting, so the underlying platform itself is legitimate, but individual pages on that platform can be created by third parties. In this case, the content appears to imitate a well-known cryptocurrency wallet brand rather than clearly identifying an independent operator.
Safety Assessment for mtmskchrpmxtnsion.gitbook.io
Multiple security signals indicate elevated risk at the time of this scan. The domain was flagged by 15 out of 91 security engines, with many of those detections classifying it as phishing or fraud-related. In addition, several web-classification sources categorized the page as phishing or fraudulent activity. The screenshot and page metadata also show prominent MetaMask branding on a gitbook.io subdomain, which may indicate an attempt to resemble or impersonate the legitimate MetaMask service.
The malware file scan did not detect malicious files in the sampled page resources, and major content-malware threat databases listed in the scan were largely clean at the time of review. However, that does not outweigh the broader phishing-related consensus from multiple security engines. The domain's IP address is also listed on one mail-reputation blocklist, which is a weaker signal than phishing detections but still worth noting as a minor caution.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is served over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, and it is fronted by Cloudflare infrastructure. The resolved server IP belongs to Cloudflare, with hosting geolocated to Canada in this scan. The page appears to be delivered as a GitBook-hosted site, which is consistent with the visible GitBook branding and linked static assets.
DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from that additional integrity layer. No malicious files were identified in the page-level malware scan, but the stronger concern here is not server-side malware evidence; it is the apparent brand imitation and the phishing-related reputation signals associated with the URL.
Share your experience with this website. Was it safe? Did you encounter any issues?