metamskgnlogn[.]gitbook[.]io

PhishDestroy identifies metamskgnlogn.gitbook.io as a phishing domain actively impersonating the legitimate MetaMask cryptocurrency wallet platform. This domain specifically targets users by mimicking the appearance and functionality of MetaMask’s official GitBook documentation page, tricking visitors into entering their recovery phrases or downloading malicious extensions. The site is designed to harvest sensitive wallet credentials and drain cryptocurrency assets from unwary users. This domain was flagged by 7 out of 95 security vendors on VirusTotal, indicating elevated risk and inconsistent trustworthiness. Registered through Cloudflare, Inc., the domain resolves to IP 172.64.147.209 and was created on March 30, 2014. Despite its age, it continues to operate with suspicious intent. While it uses a valid SSL certificate issued by Google Trust Services, the presence of multiple security detections confirms ongoing malicious activity. If you visited metamskgnlogn.gitbook.io, stop using any downloaded files or entered information immediately. Disconnect affected devices from the internet, clear browser cache and cookies, and scan for malware. Avoid entering wallet recovery phrases or private keys on any site. Use official MetaMask channels for documentation. Report the domain to your antivirus provider and consider rotating wallet credentials if any data was exposed.