metamzklgen.gitbook.io
Category: Information Technology, Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of metamzklgen.gitbook.io
This domain appears to be a page hosted on GitBook, a documentation and publishing platform, rather than a standalone website with its own primary domain. Based on the page title, visible branding, and linked resources, the content appears to imitate a MetaMask sign-in or login page and presents itself as a cryptocurrency wallet access portal.
The page uses MetaMask-themed text, imagery, and favicon assets while being published under a GitBook subdomain that does not appear to be an official MetaMask web property. The combination of a documentation-hosting platform, a login-themed title, and cryptocurrency wallet branding suggests the page may have been created to mimic a legitimate crypto service rather than to provide ordinary product documentation.
Safety Assessment for metamzklgen.gitbook.io
Multiple independent security signals indicate elevated risk at the time of this scan. The domain was flagged by 17 out of 91 security engines, and several web-classification providers categorized it as phishing or fraud-related. In addition, one phishing-focused threat database listed the domain, which materially strengthens the concern beyond a single heuristic alert.
The page content also raises concern because it appears to use MetaMask branding and a sign-in theme while operating from an unrelated GitBook subdomain. That kind of branding mismatch may be consistent with credential-harvesting or wallet-targeting impersonation. Although one malware scan reported no infected files, it also attached a generic suspicious label to the domain and several internal links. Separately, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal than phishing detections but still worth noting.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site is delivered through Cloudflare infrastructure and resolves to an IP address associated with that network in Toronto, Canada. It presents a valid TLS certificate issued by Google Trust Services, with expiry in October 2026. This indicates encrypted transport is in place, but HTTPS alone does not validate the legitimacy of the page content.
WHOIS data indicates the parent domain has existed for many years, but this is a GitBook-hosted subdomain, so the age of the base domain should not be treated as evidence that this specific page is established or trustworthy. DNSSEC appears to be unsigned, and the server stack is fronted by Cloudflare. The main technical concern here is not transport security but the apparent use of third-party hosted infrastructure to present a page resembling a cryptocurrency login portal.
Share your experience with this website. Was it safe? Did you encounter any issues?