metamzklganv[.]gitbook[.]io

PhishDestroy identifies the domain metamzklganv.gitbook.io as hosting a generic phishing threat specifically designed to mimic a cryptocurrency login interface. The page title MetâMãsk® - Login* strongly suggests impersonation of the MetaMask brand, a widely used crypto wallet, aiming to deceive users into submitting sensitive credentials. No explicit drainer kit is mentioned, but the fake login setup implies credential harvesting for crypto asset theft.

Technical analysis reveals this domain was created on March 30, 2014, and is registered through Cloudflare, Inc. It resolves to the IP address 172.64.147.209 and holds an SSL certificate issued by Google Trust Services, adding deceptive legitimacy. VirusTotal reports that 5 out of 95 security vendors flag this domain as malicious. While Google Safe Browsing (GSB) status and blocklist counts are not specified, the detection ratio and phishing indicators elevate the risk considerably.

Currently, the phishing threat on metamzklganv.gitbook.io is active with an elevated risk level. Users should avoid interacting with this domain and any associated login interfaces. PhishDestroy recommends verifying suspicious sites before inputting credentials and reporting phishing attempts promptly. Blocking this domain and monitoring related infrastructure is advised for security teams to mitigate potential crypto fund losses and credential compromise.