metazxsdmaskmt[.]gitbook[.]io

PhishDestroy identifies metazxsdmaskmt.gitbook.io as an active phishing domain hosting a fraudulent login portal designed to harvest user credentials. This domain specifically impersonates legitimate GitBook pages to deceive visitors into entering sensitive information such as usernames, passwords, or payment details. The attackers leverage a trusted SSL certificate issued by Google Trust Services to appear legitimate, while Cloudflare’s infrastructure obscures the true hosting location. Users attempting to access this domain are at elevated risk of credential theft, financial fraud, or malware infections.

This domain was flagged by 14 out of 95 security vendors on VirusTotal, indicating widespread detection of malicious activity. It is registered through Cloudflare, Inc., and resolves to IP address 172.64.147.209. The domain was created on March 30, 2014, and is currently blocked by OpenPhish, appearing on 1 security blocklist. These technical indicators confirm its malicious intent and operational status in phishing campaigns.

If you have visited metazxsdmaskmt.gitbook.io, immediately cease any interaction and avoid entering login credentials or personal information. Disconnect from the internet if possible, scan your device for malware using reputable antivirus software, and reset passwords for any accounts that may have been exposed. Report the domain to your IT security team or the platform it impersonates (e.g., GitBook) to aid in takedown efforts. Monitor financial accounts and enable two-factor authentication where available to mitigate potential damage.