metamzklganm[.]gitbook[.]io

The domain metamzklganm.gitbook.io has been assessed as a high-risk entity with active use in fraudulent activities. The page title indicates a fraudulent login interface, potentially targeting users by imitating legitimate services. This domain was created on March 7, 2026, and is registered through Cloudflare, Inc., which may provide anonymity to the operators. The domain resolves to an IP address, 104.18.40.47, which is associated with cloud infrastructure that can host such malicious content.

Current intelligence confirms that the domain has been blocked by multiple security entities, including SEAL and PhishDestroy, indicating it has been recognized as a threat. Additionally, it is flagged by 13 out of 95 security vendors on VirusTotal, underscoring its malicious reputation. The presence of multiple security blocklist entries further corroborates its status as a phishing threat. The use of technologies such as GitBook and Google Cloud suggests that attackers may leverage reputable platforms to lend credibility to their fraudulent activities.

Defenders are advised to monitor user reports and take proactive measures to block access to this domain within organizational networks. It is critical to educate users on recognizing phishing attempts, especially when login prompts appear on web pages that mimic legitimate services. Given the high-risk classification, an immediate response is warranted to mitigate potential user exposure to this threat. Continued vigilance is necessary as the threat landscape evolves and attackers may utilize similar tactics in future campaigns.