mitamxsklogen[.]gitbook[.]io

The phishing domain mitamxsklogen.gitbook.io targets MetaMask users with a fake login page. It has been flagged as malicious by 14 out of 92 VirusTotal vendors and appears on three public blocklists, including PhishDestroy, MetaMask, and SEAL. Despite its current offline status, the domain initially posed a significant threat, leveraging a platform risk score of 85/100.

Registered through Cloudflare, Inc., and hosted on an IP address in Canada, the domain used SSL certification from Google Trust Services. It was designed to deceive users into entering their MetaMask credentials, potentially compromising their digital assets. The page title, 'M𝐞tåMäsk® @Login** | Sign In!', mimicked MetaMask branding to enhance credibility.

PhishDestroy detected this domain on the day it was created, May 9, 2026, showcasing the effectiveness of early detection systems. These systems are crucial in identifying threats before they propagate through antivirus databases, which can take 24-72 hours. The swift identification and subsequent takedown of mitamxsklogen.gitbook.io highlight the ongoing battle against phishing threats, emphasizing the need for continuous monitoring and rapid response to protect users from fraudulent schemes.