meatmusklogin[.]gitbook[.]io

meatmusklogin.gitbook.io impersonates Ethereum and MetaMask to conduct credential phishing. The domain is flagged by 14 out of 94 VirusTotal vendors, indicating significant malicious activity. It is also listed on public blocklists by PhishDestroy, MetaMask, and SEAL. The page title, "Met𝚊Mãsk® - Login - Sign in* | US," is designed to deceive users into providing their login credentials.

Registered through Cloudflare, Inc., and hosted in the US, this domain leverages a Google Trust Services SSL certificate. Despite its offline status, the domain's initial impact was substantial due to its impersonation of well-known cryptocurrency brands. The phishing site aimed to harvest sensitive information from unsuspecting Ethereum users, exploiting their trust in these brands.

The rapid detection by PhishDestroy on the same day as its creation, March 9, 2026, highlights the effectiveness of proactive monitoring systems. This early detection is crucial as phishing domains often exploit the window between registration and inclusion in antivirus databases. The domain's platform risk score of 85/100 underscores its high threat level. Although the site is now offline, the incident serves as a reminder of the persistent threat posed by credential phishing schemes targeting cryptocurrency users.