mtmsckxlogz[.]gitbook[.]io

The domain mtmsckxlogz.gitbook.io is currently active and has been identified as a high‑risk phishing platform. Registration data shows the domain was created on March 30, 2014 and is registered through Cloudflare, Inc., with authoritative nameservers dahlia.ns.cloudflare.com and hugh.ns.cloudflare.com. DNS resolution points to the IP address 172.64.147.209, which belongs to Cloudflare’s global edge network, indicating that the site leverages Cloudflare’s CDN and protection services to obscure its true hosting location.

VirusTotal analysis reports that 18 of 91 security vendors have flagged the domain, reflecting a notable consensus among detection engines that the site hosts malicious content. The domain appears on at least one public security blocklist and is explicitly blocked by the PhishDestroy feed, further confirming its malicious reputation. No additional data such as SSL certificate details, HTTP response codes, or page title have been disclosed, leaving the exact visual content and phishing lure unverified.

Consequently, while the infrastructure indicators (Cloudflare registration, IP association, detection count, blocklist presence) provide strong evidence of phishing activity, the specific payload or credential‑stealing mechanisms remain uncertain. Defenders should immediately add mtmsckxlogz.gitbook.io to URL filtering rules, incorporate the associated IP address into network‑level blocklists, and monitor for any DNS queries to the domain. Continuous ingestion of threat‑intel feeds that reference this domain, combined with endpoint telemetry for related malicious downloads, will help mitigate exposure while further analysis of the site’s content is pursued.