metumusk[.]gitbook[.]io

This domain, metumusk.gitbook.io, is identified as a high-risk crypto wallet phishing site designed to deceive users into disclosing sensitive credentials or private keys. The site mimics legitimate cryptocurrency wallet interfaces, tricking visitors into entering recovery phrases or login details, which are then harvested by threat actors. Such campaigns are commonly used to gain unauthorized access to digital assets, leading to immediate financial loss for victims. Analysis indicates the domain was registered on February 21, 2026, through Cloudflare, Inc., a registrar frequently leveraged by malicious actors to obscure ownership and hosting details. Infrastructure analysis reveals the domain resolves to the IP address 104.18.40.47, associated with Cloudflare’s network (AS13335). At the time of assessment, 17 out of 95 security vendors on VirusTotal flagged the domain as malicious, and it appears on three independent security blocklists. The SSL certificate, issued by Google Trust Services, does not mitigate the inherent risk, as phishing sites commonly use valid certificates to appear legitimate. If you visited metumusk.gitbook.io or entered any sensitive information, immediate action is required. First, disconnect the affected device from the internet to prevent further data exfiltration. Revoke any active sessions associated with the compromised credentials and transfer all digital assets to a new, secure wallet using a clean device. Monitor accounts for unauthorized transactions and enable multi-factor authentication where available. Report the incident to relevant security teams and consider notifying local cybersecurity authorities to aid in tracking the campaign.