metamzklogcn[.]gitbook[.]io

This domain, metamzklogcn.gitbook.io, poses a significant threat as a high-risk phishing site. It is designed to mimic the legitimate Metamask login page, using similar text and design elements to trick users into disclosing their login credentials and possibly other sensitive information. The use of a reputable platform like GitBook and a seemingly secure SSL certificate from Google Trust Services / WE1 adds to the deceptive nature of the site, making it more likely for users to trust the domain.

Analysis indicates that this domain was created on June 08, 2026, and has been flagged by 18 out of 95 security vendors on VirusTotal. The domain resolves to the IP address 172.64.147.209 and has been identified as a phishing site by Google Safe Browsing. Additionally, it appears on three security blocklists, including PhishDestroy and SEAL. These findings suggest that the site has been actively used for phishing attacks, targeting users of the Metamask wallet to steal their credentials and potentially compromise their accounts.

If a user has visited this domain, they should take immediate action to secure their accounts. First, change the passwords for any accounts that were accessed or logged into while on the site, particularly for Metamask and any associated cryptocurrency wallets. Monitor account activity closely for any unauthorized transactions and report any suspicious activity to the relevant service providers. Finally, consider running a full security scan on the device used to visit the site to ensure no malware was installed.