metmuaskloguinn[.]gitbook[.]io

The domain metmuaskloguinn.gitbook.io is currently classified as a high‑risk generic phishing site. It was registered on February 21, 2026 and remains active as of the report date. Registration was performed through Cloudflare, Inc., and the domain is protected by a Google Trust Services / WE1 SSL certificate. Google Safe Browsing has flagged the site for social engineering, indicating that it is being used to lure victims into credential harvesting or related deceptive activities.

Infrastructure analysis shows that the domain resolves to the IPv6 address 2606:4700:4402::ac40:93d1, which belongs to AS13335, a Cloudflare network located in the United States. The web service returns an HTTP 403 status code, suggesting that direct access may be restricted or that the site is employing access controls to evade casual inspection. Detected technologies include Cloudflare's edge services and HTTP/3, confirming the use of modern delivery mechanisms.

Detection data reveal that 14 of 95 security vendors on VirusTotal have flagged the domain, and Gridinsoft assigns it a trust score of 0 out of 100. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy feed, reinforcing the consensus that it is being used for malicious phishing campaigns. No public page content has been disclosed, so the exact visual or functional characteristics of the hosted page remain uncertain.

Defenders should prioritize blocking traffic to metmuaskloguinn.gitbook.io at network perimeters and endpoint filters. Continuous monitoring of DNS queries for this domain is advised, as well as the deployment of sinkholing techniques to capture any attempted connections. Updating threat intelligence platforms with the observed indicators—IPv6 address, SSL issuer, and the Google Safe Browsing flag—will improve detection accuracy for downstream security controls.