metamcckklognikk[.]gitbook[.]io

The domain metamcckklognikk.gitbook.io is currently active and was registered on 14 March 2026. DNS resolution points to IP 172.64.147.209, which belongs to a major CDN provider located in the United States under AS13335. The domain is served through Cloudflare nameservers dahlia.ns.cloudflare.com and hugh.ns.cloudflare.com and returns an HTTP 307 redirect. A TLS certificate issued by a widely recognized certificate authority (WE1) is present, indicating a valid, publicly trusted certificate chain. Infrastructure analysis shows the site is built on a documentation platform and utilizes cloud storage and tracing services, typical of legitimate hosting environments, but the same infrastructure can be abused for phishing. The page title explicitly references “MetaMask® Login | A crypto wallet & gateway to blockchain apps”, and the intelligence flags the domain as impersonating the MetaMask brand. The site appears on three security blocklists and is listed as blocked by PhishDestroy, MetaMask’s own protection list, and SEAL. VirusTotal scans have resulted in 13 of 94 security vendors flagging the domain as malicious. Additional reputation data includes a Gridinsoft trust score of 0/100. Given the brand‑impersonation indicator, the presence on multiple blocklists, and the low trust score, the domain should be treated as high‑risk. Defenders should block the domain at network perimeters, add it to endpoint allow‑list exclusions, and monitor for any credential submissions targeting MetaMask users. Continuous re‑evaluation is advised as further forensic evidence may emerge.