help-metmvsk[.]gitbook[.]io

This domain help-metmvsk.gitbook.io is flagged for brand impersonation targeting metamask. It resolves to IP 172.64.147.209 and was created on March 14, 2026. The page title Metamask #Login | Your Key to Accessing the Decentraliz | us directly references the targeted brand. VirusTotal detection stands at 11 out of 95 vendors. The domain remains active with high risk classification and is blocked by SEAL, MetaMask, and PhishDestroy. It appears on three security blocklists with a Gridinsoft trust score of 0/100.

Infrastructure analysis reveals technologies consisting of GitBook, Google Cloud, HSTS, Google Cloud Trace, Cloudflare, and HTTP/3. The SSL certificate originates from Google Trust Services while registration occurred through Cloudflare, Inc. These elements align with the observed impersonation indicators and support the active status reported on July 12, 2026.

Defenders should incorporate the exact domain and IP 172.64.147.209 into blocklists and review network logs for connections to these indicators. The four-month age since creation provides a baseline for timeline correlation but does not confirm operational start dates. Uncertainty persists around the full payload content and any associated subdomains or redirects beyond the recorded title.

Recommended steps include cross-referencing traffic against the listed blocking entities and monitoring for similar gitbook.io subdomains that match the impersonation pattern. No additional assumptions on campaign scope are supported by the available data.