metamaskuxlogun[.]gitbook[.]io

The domain metamaskuxlogun.gitbook.io has been identified as a high-risk brand impersonation phishing domain, specifically targeting the MetaMask cryptocurrency wallet brand. This domain is part of a broader phishing campaign that attempts to trick users into revealing their private keys or seed phrases.

Technical analysis reveals alarming indicators: VirusTotal reports 13 out of 95 security vendors flagging this domain as malicious. It was registered through Cloudflare, Inc. and resolves to IP address 104.18.40.47. The domain was created on March 30, 2014, which is unusually old for a phishing domain, suggesting it may have been compromised or repurposed. The SSL certificate is issued by Google Trust Services (WE1). The domain appears on 1 security blocklist.

As of the latest check, the domain remains active, meaning the phishing site is still accessible to potential victims. PhishDestroy recommends that users avoid interacting with this domain entirely. If you have already entered any credentials or sensitive information on this site, change your MetaMask passwords immediately and enable two-factor authentication. Report the domain to security blocklists and consider using a password manager to avoid falling for similar phishing attacks in the future.