metamazkixtn[.]gitbook[.]io

The domain metamazkixtn.gitbook.io is currently flagged as a high‑risk generic phishing infrastructure. DNS resolution points to the address 104.18.40.47, which is hosted behind Cloudflare’s network. Registration details indicate that the domain was created on 30 March 2014 and is managed through Cloudflare, Inc., using the authoritative name servers dahlia.ns.cloudflare.com and hugh.ns.cloudflare.com.

The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service, demonstrating that at least one industry‑operated sinkhole has identified malicious activity associated with the host. VirusTotal analysis shows that eight of ninety‑one scanned security vendors have raised detections, confirming that multiple independent scanners consider the domain suspicious. No additional public intelligence such as Safe Browsing verdicts, OTX references, or SSL certificate anomalies are available in the current dataset.

The limited visibility leaves uncertainty regarding the exact payload, target brand, or phishing kit employed. Defenders should incorporate the domain into URL filtering policies, enforce blocklisting in web gateways, and monitor outbound traffic for connections to the associated IP address. Continuous re‑evaluation is recommended, as the domain remains active and could be leveraged for future credential‑harvesting campaigns.