metamaskiologil-1.gitbook.io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of metamaskiologil-1.gitbook.io
This URL is a subpage hosted on GitBook, a documentation and publishing platform commonly used to create public knowledge bases, guides, and landing pages. The subdomain string "metamaskiologil-1" appears to reference MetaMask in altered form, which may indicate an attempt to mimic or resemble a known cryptocurrency wallet brand rather than represent an official project page.
At the time of this scan, the visible page content did not show a normal documentation site. Instead, the screenshot displayed a sparse notice stating that the organization has been suspended. That suggests the hosted content may have been removed or disabled by the platform operator, leaving the page inactive.
Because this is a GitBook-hosted subdomain rather than a standalone business domain, the underlying infrastructure is shared with the hosting platform. Based on the naming pattern and the phishing-related detections in the scan data, this page appears to have been associated with cryptocurrency-themed impersonation or credential-harvesting activity rather than a legitimate independent website.
Safety Assessment for metamaskiologil-1.gitbook.io
Multiple security engines flagged this URL as phishing or malicious at the time of this scan, with 14 out of 91 detections. That level of multi-engine agreement is a meaningful warning sign, especially because the subdomain name closely resembles MetaMask while altering the spelling in a way that may mislead visitors. Although the malware file scan did not detect malicious files, phishing pages often rely on deceptive content and credential collection rather than downloadable malware.
Blacklist and threat-database results were mixed. Several major content-focused threat databases were clean at the time of this scan, but the domain's IP address was listed on one mail-reputation blocklist. That DNS-based listing is a weaker signal than phishing detections and does not by itself prove harmful website content, but it does add a small amount of reputational concern.
The screenshot showing an "organization has been suspended" notice may indicate the hosting provider has already taken action against the page or disabled the associated workspace. Even so, the combination of strong phishing detections and the look-alike naming pattern suggests elevated risk. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served over HTTPS with a valid TLS certificate issued by Google Trust Services, fronted by Cloudflare infrastructure, and resolved to IP address 104.18.40.47. The domain uses Cloudflare nameservers and appears to be hosted behind Cloudflare's reverse-proxy network in Toronto, Canada. The certificate status appears valid at the time of this scan, which indicates encrypted transport but does not by itself establish legitimacy.
DNSSEC was unsigned, meaning DNS responses did not appear to have DNSSEC validation enabled. The domain itself is old, but this is a hosted GitBook subdomain, so the age of the parent domain does not meaningfully reduce risk for this specific page. The main technical concern here is not transport security but the reported phishing reputation and the suspended page state.
Share your experience with this website. Was it safe? Did you encounter any issues?