ScamLens
Brand Impersonation Warning

Lookalike Domain (metamask.io)

Cached < 6hAnonymous (3/day)

Security Report for metamask.mom

ScamLens analyzed metamask.mom using 90+ threat intelligence sources and assigned a trust score of 10/100, classifying it as dangerous.

Trust Score: 10/100

Risk Level: Dangerous

This domain behaves more like an impersonation or spoofing entry point. Do not log in, pay, or call any number shown on the site before you preserve the spoofing and communication evidence.

Site Title
使用MetaMask卡消费加密货币进行日常购物,加密货币卡 | MetaMask卡
Site Description
全球暢行:出國旅遊時,不用提前兌換大量外幣,直接刷 U 卡或在當地的 ATM 提領外幣現鈔,既方便又省下昂貴的換匯手續費。去中心化與非託管選擇:進入 2026 年,像 metamask.mom 這類「非託管(Non-Custodial)」的信用卡成為主流,資產依然保管在自己的鏈上錢包裡,刷卡時才進行扣款授權,安全係要極高。
zh-CN HTTPS ✓
1
Checked 1 times

Quick Answer

This domain behaves more like an impersonation or spoofing entry point. Do not log in, pay, or call any number shown on the site before you preserve the spoofing and communication evidence.

Positive Signals

  • + Google Safe Browsing: Safe
  • + HTTPS encryption supported

Concerns

  • - Possible impersonation of metamask.io
  • - 3 security sources flagged as suspicious

Score Breakdown

Domain Reputation 50
Threat Intelligence 91
13/16 safeSafeBrowsing OK
Technical Security 60
HTTPS
Community Reputation 50
No community data yet

Was this assessment accurate?

0 say Safe0 say Suspicious
What do you think?
What to do next

metamask.mom is confirmed malicious

Multiple threat-intelligence feeds agree this domain is dangerous. Treat any data you entered as compromised.

Confidence:High
  1. Close the tab immediately
    Continued browsing increases the chance of drive-by downloads, exploit kits, or session hijacking.
  2. Run a full antivirus / malware scan
    If the site loaded scripts, scan your device. Update your OS and browser to the latest version first.
  3. Change passwords for any account you entered
    Rotate the password and enable two-factor authentication on the real site. Watch for unauthorised charges over the next 30 days.
  4. Report the incident
    Reporting helps blocklists update faster and protects other potential victims.
Cross-check with independent scanners

Trust but verify — open this domain on unrelated security services and compare the verdict.

Sign in to run the AI risk analysis

The threat-intelligence signals below are available to everyone. The plain-language AI risk summary is generated on demand for signed-in users — sign in (free) to run it for this domain.

Threat-intelligence sources

Checked across 23 sources — 3 flagged this domain

Show source breakdown
  • safe_browsing clean
  • urlhaus clean
  • cloudflare_radar clean
  • cert_transparency clean
  • alienvault_otx clean
  • phishstats clean
  • phishdestroy flagged
  • threatfox clean
  • shodan_internetdb clean
  • phishtank clean
  • rdap clean
  • maltiverse clean
  • dns_security flagged
  • wanted_domains clean
  • darkweb clean
  • metamask_blocklist flagged
  • openphish clean
  • scam_blocklist clean
  • maltrail clean
  • crypto_scam_feed clean
  • phishing_army clean
  • hagezi_tif clean
  • red_flag_domains clean

ScamLens aggregates real-time signals from 90+ commercial and open-source threat-intelligence providers including Google Safe Browsing, VirusTotal, PhishTank, URLhaus, ThreatFox, Cloudflare Radar, OTX, IPQS, GoPlus, Honeypot.is, and more. A flagged signal is evidence; the absence of flags is not proof of safety. Use the signals below alongside community reports to decide.

Advanced Scan

Comprehensive data lookup across premium sources

$2.99one-time payment
  • Website history verification
  • Detailed WHOIS information
  • Reverse WHOIS association
  • Traffic rank analysis
  • Company registration check
Recommended

AI Deep Investigation

Cross-check the story, claims, and supporting evidence before you decide

$4.99one-time payment
  • Everything in Advanced Scan
  • AI website content analysis
  • AI cross-reference verification
  • Claim authenticity validation
  • Detailed report with evidence
Most Thorough

Comprehensive Investigation

Full-spectrum investigation with company deep search & social intelligence

$14.99one-time payment
  • Everything in Deep Investigation
  • AI company background search
  • Social media intelligence
  • Detailed suspicious point analysis
  • Event timeline & entity connections

This analysis is for informational purposes only and does not constitute a legal determination.

Security Sources

Google Safe Browsing
Safe
Cloudflare Radar
Safe
URLhaus (abuse.ch) Confidence: Medium
Not Listed
Certificate Transparency Confidence: Low
Not Listed
AlienVault OTX Confidence: Medium
Not Listed
PhishStats Confidence: Low
Not Listed
PhishDestroy Confidence: Medium
Unsafe
ThreatFox (abuse.ch) Confidence: Low
Not Listed
Shodan InternetDB Confidence: Medium
Not Listed
PhishTank Confidence: Low
Not Listed
RDAP Domain Registration Confidence: Low
Not Listed
Maltiverse Confidence: Low
Not Listed
DNS Security Confidence: High
Unsafe
Law Enforcement Confidence: Low
Not Listed
darkweb Confidence: Low
Not Listed
MetaMask Blocklist Confidence: Medium
Unsafe
OpenPhish Confidence: Low
Not Listed
Scam Blocklist (Jarelllama) Confidence: Low
Not Listed
Maltrail (stamparm) Confidence: Low
Not Listed
Crypto Scam Feed Confidence: Low
Not Listed
Phishing Army Confidence: Low
Not Listed
HaGeZi Threat Intelligence Confidence: Low
Not Listed
Red Flag Domains Confidence: Low
Not Listed

Domain Information

DNSSEC
Disabled

SSL/TLS Certificate

No data available

Server Information

IP Address
172.67.209.15
Hosting Provider
Cloudflare, Inc.
ASN
AS13335 Cloudflare, Inc.
Server Location
Toronto, Canada
Organization
Cloudflare, Inc.

Related Intelligence

Technical Details (DNS / Headers / Subdomains)

DNS Records

Email Security

SPF Not Configured DMARC Not Configured
Type Value
A 172.67.209.15
A 104.21.74.250
AAAA 2606:4700:3036::6815:4afa
AAAA 2606:4700:3033::ac43:d10f
NS clay.ns.cloudflare.com
NS melissa.ns.cloudflare.com

HTTP Security Headers

0/6
Strict-Transport-Security Missing
Content-Security-Policy Missing
X-Frame-Options Missing
X-Content-Type-Options Missing
Referrer-Policy Missing
Permissions-Policy Missing

Channels / Subdomains

No data available

Community Reports

Log in to report and share your experience

...

Report & Take Down This Website

The results are based on multiple third-party data sources and AI models. False positives or negatives may occur. This report should not be used as the sole basis for any decision. Please verify with additional sources.

Preserve the account and payment evidence first

If you already logged in, paid, or shared data, move into the victim action plan first and then complete the formal report.

Open the action plan

For impersonation sites, the priority is not more browsing. It is evidence preservation and loss containment.

Related Security Guides

Learn more about how to protect yourself from this type of threat.

Understanding this threat

FAQ

Is metamask.mom safe to visit?

metamask.mom received a trust score of 10/100 from ScamLens, indicating high risk. 3 threat intelligence sources flagged this domain as potentially dangerous. We strongly advise against visiting or sharing personal information.

Was metamask.mom flagged by any threat databases?

metamask.mom was flagged by 3 out of 30+ threat intelligence sources. Specifically flagged by: phishdestroy, dns_security, metamask_blocklist. The detected threat categories include: general threat.

How old is metamask.mom?

Registration date information for metamask.mom is not publicly available through WHOIS records, which can itself be a risk indicator.

Does metamask.mom use HTTPS and have a valid SSL certificate?

ScamLens could not verify the SSL certificate details for metamask.mom during this scan. Treat this as unavailable evidence, not as proof that the site is safe or unsafe.

What security headers does metamask.mom implement?

metamask.mom is missing important security headers: Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Strict-Transport-Security, Referrer-Policy, Permissions-Policy. Missing security headers can leave visitors vulnerable to cross-site scripting (XSS) and other web-based attacks.

What does the ScamLens community think about metamask.mom?

No community votes or reports have been submitted for metamask.mom yet. You can be the first to share your experience.

Where is metamask.mom hosted?

metamask.mom is hosted by Cloudflare, Inc. in Toronto, Canada (ASN: ASAS13335 Cloudflare, Inc.).

Is this report useful?

Use this report to warn others to stop logging in, paying, or contacting the listed support before they verify it.

Forward to your parents — they deserve to browse safely too.

Lost crypto to this scam?

We offer a paid forensic trace across 18 blockchains with sanctions screening — from $99.

See Crypto Trace

About this analysis

This report is generated from real-time data across 90+ threat intelligence sources, combined with AI analysis and community feedback.

Learn about our scoring methodology | Last analyzed: August 9, 2026

All Cloudflare, Inc. domains