support-metumsokwllt[.]gitbook[.]io

This domain, support-metumsokwllt.gitbook.io, is identified as a credential harvesting phishing infrastructure designed to mimic legitimate documentation platforms. Analysis indicates the site was engineered to deceive users into submitting authentication credentials, financial details, or other sensitive information under the guise of official support or technical documentation. The domain leverages GitBook’s hosting environment to lend an air of legitimacy, increasing the likelihood of successful social engineering attacks against unsuspecting users. Infrastructure analysis reveals concrete evidence of malicious intent. The domain is flagged by 17 out of 95 security vendors on a leading threat intelligence platform, indicating a consensus among detection engines regarding its phishing classification. It was registered on May 14, 2026, through GitBook’s domain services, and appears on at least one security blocklist, further corroborating its malicious status. Despite being taken offline, historical records confirm its operational use in phishing campaigns prior to deactivation. Users who visited support-metumsokwllt.gitbook.io should take immediate remedial action. Any credentials or sensitive data entered on the site must be considered compromised and should be reset across all platforms where identical or similar passwords were used. System logs should be reviewed for signs of unauthorized access or anomalous activity following the interaction with this domain. Additionally, network-level monitoring is recommended to detect any residual connections or callbacks to associated infrastructure, as phishing domains often operate within broader command-and-control frameworks.