metamzklgun[.]gitbook[.]io

The domain metamzklgun.gitbook.io is identified as an active credential theft site, posing a significant risk to users attempting to enter sensitive login information. This campaign targets victims with the intent to harvest credentials rather than leveraging brand impersonation or crypto drain techniques.

This domain resolves to the IP address 172.64.147.209 and is registered through Cloudflare, Inc. It was created on March 30, 2014. Security analysis from VirusTotal reveals that 5 out of 95 vendors flag this domain as malicious, indicating a moderate detection rate. The SSL certificate is issued by Google Trust Services, which may lend false legitimacy to the site. There is no explicit blocklist count provided, but the elevated risk classification underscores the threat.

Currently active, metamzklgun.gitbook.io should be treated as a high-risk domain. Users are strongly advised to avoid clicking links associated with this domain or submitting any personal credentials. Network administrators should consider blocking access at the firewall level and monitor for any related phishing attempts. Reporting the domain to security intelligence platforms enhances community defense against this credential theft operation.