mitamakuxslogin[.]gitbook[.]io

The domain mitamakuxslogin.gitbook.io has been identified as a credential phishing site specifically impersonating MetaMask, a popular cryptocurrency wallet. This threat is classified as credential theft, targeting users' login credentials and potentially their crypto assets. The domain is currently offline, having been taken down after its malicious nature was confirmed.

Analysis of the domain reveals it was created on March 30, 2014, and registered through Cloudflare, Inc. It resolves to IP address 172.64.147.209 and bears an SSL certificate from Google Trust Services (WE1). Security intelligence shows that 19 out of 95 VirusTotal vendors flagged this domain as malicious, and it appears on three security blocklists. Google Safe Browsing also flags it for phishing. The page title, which includes obfuscated characters mimicking "MetaMask® - login | us - MetaMask® - Login - us", further confirms the impersonation attempt.

Given that the domain is now offline, the immediate risk is mitigated, but users should remain vigilant. PhishDestroy recommends that anyone who may have interacted with this domain should change their MetaMask credentials immediately and enable two-factor authentication. Additionally, users should avoid clicking on links from unsolicited messages and always verify the authenticity of login pages by checking the URL carefully. For ongoing protection, consider using a reputable security extension that blocks known phishing sites.