Is metamaskwallet.com.cn a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet, Kaspersky, Sophos flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This Chinese-language website presents itself as a MetaMask information and download portal, offering browser-extension and mobile-application guidance together with articles about MetaMask, Swap, SocialFi, and GameFi. Its apparent business model is informational publishing, potentially supported by advertising or partnerships, rather than direct financial services.

Scam/Impersonation Risk

The site carries a critical sensitive-interaction risk because external reputation checks recorded a confirmed blacklist status, 17 malicious detections, and one suspicious detection, including findings from multiple major security providers. These signals outweigh the otherwise benign page-level presentation. The homepage uses the title “MetaMask官网 - 全球领先的以太坊&Web3钱包” and reproduces MetaMask-oriented download and support navigation, which creates a material risk that visitors could mistake the site for an official MetaMask channel, although the supplied page analysis did not confirm an impersonation, login form, hidden form, wallet connection, or wallet-drainer behavior. The published address `[email protected]` is a contact-channel integrity anomaly because the top-level domain is a deliverability-breaking typo or possible typosquat. Evidence:

• External reputation checks recorded 17 malicious detections and 1 suspicious detection; the domain was also recorded as blacklisted.
• The homepage contains MetaMask download guidance for Chrome, iPhone, and Android and labels the site “MetaMask官网.”
• Behavioral inspection recorded 0 external XHR requests, 0 wallet-connect runs, 0 wallet-sensitive runs, 0 wallet-drainer runs, and 0 hidden forms.
• Domain registration records show creation on 2022-04-21 and an age of 4.33 years.

Regulatory Verification Notes

The website functions as an informational blog rather than presenting a clearly defined regulated financial service. Its footer displays Privacy Policy, Terms of Use, About, Support, and related navigation, and includes the text “湘ICP备2023031513号,” but the supplied pages do not provide a verified financial-services license, license number, or independently confirmed operator identity. This is a material disclosure gap for a site directing visitors toward cryptocurrency-wallet downloads, but the absence of a license is a verification issue rather than standalone proof of fraud. The available ownership record identifies 上海曼珠沙华体育科技有限公司 and the registrar as 上海福虎信息科技有限公司; that record does not independently establish a connection to MetaMask. Evidence:

• The homepage footer lists legal and corporate-navigation items including Privacy Policy, Terms of Use, About, and Support, but no verified financial license is shown.
• The homepage displays “湘ICP备2023031513号” as its visible registration-style disclosure.
• WHOIS records identify 上海曼珠沙华体育科技有限公司 as the owner and 上海福虎信息科技有限公司 as registrar.
• The site’s transport encryption uses a DV certificate issued by YR2, valid to 2026-09-26T09:01:45+00:00.

What to Verify Next

Before any sensitive interaction, an organisation should confirm through an independently sourced official MetaMask channel that the domain is an authorised publisher and that every download destination leads to the official software publisher. The visible registration disclosure and the named operator should be checked against the relevant Chinese registration and corporate records. Any proposed support or partnership contact should be validated through an offline or independently obtained channel rather than through the site alone. Evidence:

• The homepage provides direct download guidance for Chrome, iOS, and Android applications.
• The homepage presents MetaMask-branded navigation and articles but does not independently establish an authorised relationship with MetaMask.
• The site identifies a registration-style disclosure and a corporate owner, providing specific records for independent comparison.

Summary Verdict

The overall posture is critically unsafe for sensitive interaction. The site may be a functioning informational publication, but the convergence of confirmed blacklist status, malicious external detections, MetaMask-oriented official positioning, and unverified brand affiliation makes it unsuitable for login, credential submission, software installation, or financial activity.

Infrastructure Integrity

The site resolves to one likely origin address and is hosted in Hong Kong on AS132825, MYTEK-AS-AP - MYTEK TRADING PTY LTD, AU. No CDN is detected in the infrastructure record, while the infrastructure-normalization field marks the hosting environment as trusted; that is limited technical context only and cannot offset the external reputation findings.

Closing Assessment

Sensitive actions should not proceed through this site; any necessary research should remain read-only, with software, credentials, and transactions handled through independently authenticated official channels.