mmtemssk-loggm[.]gitbook[.]io

This domain, mmtemssk-loggm.gitbook.io, was registered on February 21, 2026 through Cloudflare, Inc. and is currently listed as offline with an HTTP 403 response. The site is protected by Cloudflare and serves content over HTTP/3, resolving to the IP address 172.64.147.209, which belongs to AS13335 Cloudflare, Inc. in the United States. The TLS certificate is issued by Google Trust Services under the WE1 designation, confirming the use of a legitimate certificate chain. VirusTotal analysis shows that 16 of 93 security vendors have flagged the domain, indicating a moderate level of detection across the ecosystem.

The page title returned by the server is “Suspected phishing site | Cloudflare”, and the domain appears on a single security blocklist, having been blocked by the PhishDestroy service. Gridinsoft assigns a trust score of 0 out of 100, reflecting a lack of confidence in the site’s safety. While the available data confirm that the domain is being used for a generic phishing campaign, no additional details about the lure, targeted brands, or credential‑harvesting mechanisms have been observed.

The limited visibility of the underlying content, combined with the offline status, prevents a full technical dissection of the malicious payload. Defenders should continue to block the domain at network perimeter and DNS filtering layers, monitor for any resurgence of activity from the associated IP address, and incorporate the domain’s detection metadata into threat‑intel feeds. Ongoing observation of Cloudflare‑hosted infrastructure is recommended, as the service can be leveraged for rapid re‑deployment of phishing pages.