metmskzlogun[.]gitbook[.]io

This domain is flagged as a high-risk cryptocurrency wallet phishing site designed to harvest credentials for decentralized finance platforms. The page mimics authentication portals, presenting a login interface under the title M𝐞tåMäsk® !Sign_IN | Log_In, a visually altered version of a legitimate wallet service. Analysis indicates the domain targets users attempting to access their digital asset accounts, tricking them into submitting sensitive recovery phrases or private keys. Infrastructure analysis reveals the domain was registered on March 12, 2026, through a .io TLD registry. It resolves to the IP address 172.64.147.209 and uses an SSL certificate issued by Google Trust Services, which may lend a false sense of legitimacy. The domain appears on three security blocklists and is detected by 15 out of 95 security vendors on VirusTotal, confirming its malicious classification. The Gridinsoft trust score of 0/100 further supports its fraudulent nature. Users who visited this domain or entered credentials should immediately revoke any active sessions linked to the impersonated service. Reset all passwords and recovery phrases associated with cryptocurrency wallets, and enable multi-factor authentication where available. Monitor connected accounts for unauthorized transactions and report the incident to relevant security teams. If private keys or seed phrases were exposed, transfer assets to a new, secure wallet immediately to prevent theft.