metmsklogxn[.]gitbook[.]io

PhishDestroy identifies metmsklogxn.gitbook.io as an active crypto drainer scam leveraging GitBook’s trusted platform to deceive users into connecting compromised wallets. This elevated-risk domain hosts malicious JavaScript payloads designed to drain cryptocurrency assets upon wallet connection, posing severe financial threats to unsuspecting visitors. The threat is immediate and financially damaging, with no legitimate use case beyond fraud. This domain was flagged by 10 out of 95 VirusTotal security vendors, blocked by MetaMask and SEAL, and appears on 2 major blocklists. It resolves to IP 172.64.147.209, registered through Cloudflare, Inc on March 30, 2014. The SSL certificate is issued by Google Trust Services, which attackers often exploit to appear legitimate. Despite its age, this domain has been weaponized recently, highlighting the opportunistic nature of crypto drainer campaigns. Users must treat this domain as a confirmed threat vector. Never connect any wallet or enter credentials on metmsklogxn.gitbook.io. For suspected exposure, immediately revoke any connected permissions via wallet settings and transfer remaining assets to a clean wallet. Report this domain to PhishDestroy and your wallet provider’s fraud team. Always verify URLs via official channels before interaction, especially when prompted for wallet connections.