metamaeiosklgin[.]gitbook[.]io

PhishDestroy identifies metamaeiosklgin.gitbook.io as an active crypto drainer impersonating the legitimate GitBook documentation platform. This fraudulent domain mimics GitBook's structure to deceive users into connecting their cryptocurrency wallets and signing malicious transactions that drain assets. The threat is particularly insidious because it exploits trust in well-known documentation tools to trick both developers and general users into authorizing wallet access.

This domain was flagged by 11 out of 95 security vendors on VirusTotal, and it has been blocked by reputable security solutions including MetaMask and SEAL. Technical indicators show the domain was registered through Cloudflare, Inc. on March 30, 2014, and currently resolves to IP address 172.64.147.209. It has also been listed on 2 public blocklists, confirming its malicious reputation. The SSL certificate is issued by Google Trust Services, which attackers often exploit to appear legitimate.

If you’ve visited metamaeiosklgin.gitbook.io, disconnect your wallet immediately and revoke any permissions it may have accessed. Use PhishDestroy to verify the legitimacy of links before interacting, and consider using hardware wallets or wallet permission managers for added security. Avoid entering any credentials or connecting wallets to suspicious sites, even if they appear to mimic trusted platforms. Stay cautious and verify every link through PhishDestroy to prevent financial loss.