welcome-metamask-en.tem3[.]io
Category: Phishing And Fraud
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCRisk.com may earn a referral commission when users sign up through this link.
Description of welcome-metamask-en.tem3[.]io
The domain welcome-metamask-en.tem3[.]io appears to be a landing page hosted on the tem3.io website-building platform and presented as a MetaMask-related login or onboarding page. Its page title and metadata reference MetaMask, a well-known cryptocurrency wallet, and the visible design attempts to mimic branding associated with crypto wallet services. However, the screenshot also shows prominent builder-platform text such as "Site built on Temp3" and "Develop by Temp3," which suggests the page may be a quickly assembled hosted landing page rather than an official MetaMask property.
Based on the domain structure, this is a subdomain under tem3.io rather than a standalone MetaMask-owned domain. The naming pattern "welcome-metamask-en" appears intended to attract users looking for MetaMask access or support, while the page content references wallet login and token management. This combination is commonly associated with credential-harvesting or wallet-seed-phrase lures targeting cryptocurrency users.
Safety Assessment for welcome-metamask-en.tem3[.]io
Multiple indicators suggest elevated risk at the time of this scan. The site was categorized by multiple web-classification providers as phishing or fraud-related, and 17 out of 91 security engines flagged it. In addition, malware scanning reported a malicious threat level and identified a flagged external resource associated with the page. The domain was also listed in a major safe-browsing database for social-engineering activity at the time of review.
There is also a strong impersonation concern. Although the page claims to be related to MetaMask, the domain is hosted on tem3.io rather than an official MetaMask domain, and the page metadata explicitly invites users to "Access your MetaMask wallet instantly" through this third-party subdomain. The screenshot further shows inconsistent branding and builder-platform artifacts, which may indicate a deceptive landing page rather than a legitimate wallet portal.
The domain name also closely resembles a well-known e-commerce brand domain in its base host structure, which may indicate look-alike abuse on top of the apparent MetaMask-themed impersonation. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid TLS certificate issued by a mainstream certificate authority and is served through Cloudflare infrastructure, with nameservers also pointing to Cloudflare. The observed IP geolocates to Canada, and the domain is approximately 1 year old. DNSSEC appears to be unsigned, which is not uncommon but does remove one layer of DNS integrity protection.
From a security perspective, the more notable concerns are application-level rather than transport-level. The page was hosted on a site-builder subdomain, had no Tranco ranking, reportedly lacked MX records, and loaded or referenced a flagged external endpoint. These factors, combined with phishing classifications and social-engineering listing status, may indicate a disposable or campaign-style setup rather than a stable official service.
Share your experience with this website. Was it safe? Did you encounter any issues?