🌐 metamask.com 200 🔒 SSL Valid
Checked: just now 🔗 Visit site
🔗
Also reached via: metamask.io
✨ About this site
This is the official website for MetaMask, a widely used cryptocurrency wallet and gateway to blockchain applications. It serves individuals looking to manage digital assets, interact with decentralized finance, and use Web3 apps directly from their browsers or mobile devices. The platform is a major, highly recognized fixture in the cryptocurrency ecosystem, trusted by millions globally.
📊 What the data says
This 21-year-old domain is hosted on Cloudflare and built using a stack that includes Next.js, React, and Vercel. While it maintains a valid SSL certificate and robust security headers like HSTS and CSP, the site currently returns a 200 status code and has a PageSpeed performance score of 45 on desktop.
HTTP Status ?A three-digit code showing if the site loaded successfully (200), redirects (301/302), or has errors (4xx/5xx).Read more →
200
SSL Expires ?When the SSL certificate expires. An expired certificate causes browser security warnings.Read more →
in 88d
Domain Expires ?When the domain registration expires. If not renewed, the domain becomes available to others.Read more →
in 455d
Hosting ?The company and location where this website's server is physically located.Read more →
Unknown
Security ?Score based on key HTTP security headers: HSTS, Content-Security-Policy, and X-Frame-Options.Read more →
3/3
IP Address ?The numerical address of the server hosting this website. Reveals location, provider, and network.Read more →
104.18.42.93
Performance ?Lighthouse performance score from Google PageSpeed Insights (0–100). Measures real-world loading speed, interactivity and visual stability.
40 mob
Uptime
N/A
⚡ Performance ?Lighthouse performance score from Google PageSpeed Insights (0–100). Measures real-world loading speed, interactivity and visual stability. 40
▼
Mobile
40
Score
100
Accessibility
92
Best Practices
100
SEO
LCP 5.40s
CLS 0.014
FCP 2.55s
TTFB 0.11s
TBT 2,083ms
SI 8.55s
Desktop
45
Score
100
Accessibility
92
Best Practices
100
SEO
LCP 3.17s
CLS 0.040
FCP 0.52s
TTFB 0.03s
TBT 1,357ms
SI 3.26s
Checked: 2026-10-28 18:31:30.874326 · View on PageSpeed
🛠️ Tech Stack ?Technologies detected on this website: CMS, frameworks, libraries, CDN, and analytics tools. 5
▼
📊 Analytics
Google Tag Manager
🌐 CDN
Cloudflare
⚙️ Framework
Next.js
☁️ Hosting
Vercel
⚡ JS Framework
React
📸 Screenshot Processing...
▼
⏳

Screenshot is being captured...

🌐 DNS Records ?DNS translates domain names to IP addresses. Records control where the site, email, and services are directed.Read more →
▼
A (IPv4)104.18.42.93172.64.145.163
AAAA (IPv6)2606:4700:440c::6812:2a5d2a06:98c1:310d::ac40:91a3
NSgraham.ns.cloudflare.comparis.ns.cloudflare.com
MX1 smtp.google.com
TXT (21)
Services configured via TXT:
Google3 Atlassian Canva Figma Launchdarkly Linkedin Loom Miro Notion OpenAI Segment Slack
+6 other TXT record(s)
Show all TXT records
figma-domain-verification=9bd954c641a09993305cb82a69ab35e7cdc49f8b430ed02f1b93446336a2abb1-1790228881
cloudflare_dashboard_sso=e1476839129617d403ad70ba48ca4438
airtable-verification=a289dfd51c340d66bf46253dc04a6434
canva-site-verification=c0pmVQzPc6sQFPHnrHOrvA
google-site-verification=RCMw-Xo5avpW4XW8NAyIjeVGva6aKA2_05lkauahu3I
v=spf1 include:_spf.google.com include:mailgun.org include:4795067.spf57.hubspotemail.net ~all
linkedin-site-verification=6f2f2df8-668e-4819-a537-82db76cc5d3a
openai-domain-verification=dv-Cj9ZPfdSu3u4FKoWikAynqhX
notion-domain-verification=60RXfJEZrhuq7qCAChmypRRiX5JOulddudkusU56gSV
mixpanel-domain-verify=db736e33-0e4e-44f7-9f27-a642ecb03179
anthropic-domain-verification-1gft0g=W8DTVX5UYNz6PSYtqQJxwHvOr
google-site-verification=OppZiygwhL3w3mP7JT20oqI9QQ_Py7V5LYKUiQleKEg
miro-verification=06aec59d07be7d0932c66052bef4e0ec9f560256
launchdarkly-domain-verification=7853e54c-794d-425e-8011-1319921bb04e
slack-domain-verification=EhrOqts38HjADU4O3N6LU9JXC4mXHScQ60NfqpYW
zapier-domain-verification-challenge=86cf7d94-db2d-4579-b988-bb44958418af
atlassian-domain-verification=gNmMu3xWg6QySEyF1zTavroUJD8fy4EzkegOniPZtQmBCM1H6QiSNXmJ6NMHh4Qt
ZOOM_verify_H1aGQsMUEfwomj8jmZa9Qo
google-site-verification=psr2mG2Prpafp1DcqtewbKx_yH8DAPgIxjnO68-_hyI
segment-site-verification=rXjTA8vbIfAS7JXXm8vXVPZQKVkhV4DC
loom-site-verification=64d480942af64119a669dd8597458ed6
📋 WHOIS / RDAP ?Public registration data: who registered the domain, when, and when it expires.Read more →
▼
RegistrarCloudflare, Inc.
Registered2005-01-28
Expires2028-01-28 (in 455 days)
Last Updated2026-10-21
Statusclient transfer prohibited
🔒 SSL Certificate ?Encrypts the connection between browsers and this website. Valid SSL = HTTPS works.Read more → Valid
▼
Subject (CN)metamask.com
IssuerLet's Encrypt
Valid From2026-10-28
Valid Until2027-01-26 (88 days left)
SANs (2)*.metamask.commetamask.com
📡 HTTP Headers ?Metadata sent by the server: reveals software, caching rules, and security configuration.Read more →
▼
Status200
Servercloudflare
Content-Typetext/html; charset=utf-8
Final URLhttps://metamask.com/
x-powered-byNext.js
strict-transport-securitymax-age=15552000; includeSubDomains
content-security-policydefault-src 'self'; media-src 'self' https://*.twimg.com/ https://videos.ctfassets.net/; script-src 'self' 'wasm-unsafe-eval' https://cdn.segment.com https://www.gstatic.com https://platform.twitter.com https://js.hsforms.net https://www.google.com/recaptcha/enterprise.js https://google.com/recaptcha/enterprise.js https://recaptcha.net/recaptcha/enterprise.js https://*.osano.com https://*.google-analytics.com https://*.hs-banner.com https://www.googletagmanager.com https://app.link https://*.app.link 'nonce-ZjJmMmI5NWMtNDlhYS00ZmQ3LWFjYzAtYzM1MDljNjJlOGZj' 'strict-dynamic'; worker-src 'self' blob: https://www.gstatic.com https://*.osano.com; style-src 'self' 'unsafe-inline' https://*.osano.com https://www.googletagmanager.com https://fonts.googleapis.com ; img-src 'self' blob: data: https:; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net/npm/[email protected]/dist/TwemojiCountryFlags.woff2 ; object-src 'none'; base-uri 'self'; form-action 'self' https://forms.hsforms.com/; frame-ancestors 'self' https://app.contentful.com; frame-src 'self' https://platform.twitter.com https://www.youtube.com/ https://player.vimeo.com/ https://www.google.com/ https://forms.hsforms.com/ https://js.hsforms.net/ https://*.lpsnmedia.net https://*.osano.com https://www.googletagmanager.com/ https://share.hsforms.com/ https://google.com/recaptcha/enterprise/ https://form.typeform.com https://app.hubspot.com ; upgrade-insecure-requests; connect-src 'self' blob: https://www.gstatic.com https://forms.hsforms.com/ https://forms-na1.hubspot.com https://forms.hubspot.com https://api.lu.ma https://react-tweet.vercel.app/api/tweet/ https://cdn.syndication.twimg.com https://tagassistant.google.com https://*.googletagmanager.com wss://*.googletagmanager.com https://api.segment.io/v1/ https://cdn.segment.com/v1/ https://price.api.cx.metamask.io/ https://account.api.cx.metamask.io/ https://px.ads.linkedin.com/ https://analytics.twitter.com https://analytics.x.com https://t.co https://*.osano.com https://*.google-analytics.com https://www.google.com https://*.google.com https://googleads.g.doubleclick.net https://ad.doubleclick.net https://stats.g.doubleclick.net https://pagead2.googlesyndication.com https://www.googleadservices.com https://js.hs-banner.com https://cta-service-cms2.hubspot.com https://*.reddit.com https://*.redditstatic.com https://api.hubspot.com https://api.hubapi.com https://static.hsappstatic.net https://assets.ctfassets.net/ https://downloads.ctfassets.net/ https://unpkg.com https://api2.branch.io https://polymarket.com https://cdn.segment.com/analytics-next/ https://cdn.segment.com/analytics.js/ https://cdn.jsdelivr.net/npm/@lottiefiles/ https://google.com/recaptcha/enterprise/ https://api.typeform.com;
x-frame-optionsDENY
x-content-type-optionsnosniff
cache-controlprivate, no-cache, no-store, max-age=0, must-revalidate
cf-raya5257885b9aac130-IAD
Security headers ?HTTP headers that protect visitors from attacks. HSTS forces HTTPS, CSP controls resource loading, X-Frame-Options prevents clickjacking.Read more →
HSTS
Content-Security-Policy
X-Frame-Options
🏠 Hosting ?Physical infrastructure: where the server is, who operates it, and what network it belongs to.Read more →
▼
IP Address104.18.42.93
ProviderUnknown
OrganizationN/A
ASNN/A
LocationN/A
🛡️ Security Score B (5/7)
▼
Valid SSL
HSTS
CSP
X-Frame-Options
X-Content-Type
Referrer-Policy
Permissions-Policy
🗺️ Sitemap & Robots
▼
Open to search engines
This site's robots.txt lets crawlers access its main content. Search engines can index it normally.
Areas hidden from crawlers:
📁 Other paths 3
Show raw disallow rules (3)
/storybook
/playground
/stylesheet
Sitemap Found 5 sitemaps (index) pages
🔗 Social & Meta Tags Complete
▼
TitleMetaMask Crypto Wallet. Buy and Sell Bitcoin, Ethereum, Solana
DescriptionBuy, sell, swap, earn, and spend BTC, ETH, SOL and more — all in one self-custody crypto wallet. Total control over your assets, trusted by millions of users.
OG TitleMetaMask: Where your money lives
OG DescriptionBuy, trade, earn, and spend, all from one app you control.
OG Imagehttps://images.ctfassets.net/clixtyxoaeas/745x5lywNdixhqV1GeE3Qj/28dafff72438ae00a17bf20665c1983c/5b455653-52e2-4eb3-b163-43bdae877c5a.png
OG preview
OG Typewebsite
OG Site NameMetaMask
Twitter Cardsummary_large_image
Canonical URLhttps://metamask.com
Languageen
📧 Mail Security ?Email authentication records (SPF & DMARC) that prevent spoofing and phishing from this domain.Read more →
▼
SPF✓ Present
v=spf1 include:_spf.google.com include:mailgun.org include:4795067.spf57.hubspotemail.net ~all
DMARC✓ Present
v=DMARC1; p=reject; rua=mailto:[email protected];
MX Records
1 → smtp.google.com
🌍 Other TLDs ?Other top-level domain variants of this domain name and their availability. 14 active 5 for sale 4 available
▼
.com current
.net taken
.org taken
.info taken
.io ●
.co ●
.dev taken
.app ●
.me ●
.biz ●
.eu ●
.xyz ●
.fi Available
.se ●
.de ●
.uk Available
.fr ●
.nl taken
.es ●
.it Available
.us ●
.ca ●
.com.au Available
.co.uk ●
📡 Uptime Monitor
▼

Not checked yet — data will appear after the first monitoring run.