mstamasklogun.gitbook[.]io
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of mstamasklogun.gitbook[.]io
This URL appears to be a GitBook-hosted page presenting itself as a MetaMask login or onboarding guide. The page title, visible branding, and content all reference MetaMask and blockchain wallet usage, with text describing wallet setup, browser extension installation, and account access. Rather than operating on an official MetaMask-owned domain, it is published under a gitbook.io subdomain, which suggests it is user-created documentation hosted on a third-party publishing platform.
Based on the page layout and metadata, the site appears to function as an informational or promotional landing page related to cryptocurrency wallet access. The subdomain string "mstamasklogun" resembles a misspelled version of "MetaMask login," which may indicate an attempt to attract users searching for wallet login help. No clear evidence in the provided data identifies the actual operator of this page, and the hosting platform appears to be GitBook infrastructure fronted by Cloudflare.
Safety Assessment for mstamasklogun.gitbook[.]io
Multiple web-classification providers categorized this URL as phishing or fraud-related, and 18 out of 92 security engines flagged it at the time of this scan. That level of multi-engine agreement is a meaningful warning signal, especially because the detections are centered on phishing rather than a vague or isolated heuristic. The page also appears to imitate MetaMask branding while being hosted on an unrelated gitbook.io subdomain, which may increase the risk of user confusion.
Although one malware scan reported no flagged files and several blacklist databases were clean at the time of this scan, those cleaner signals do not outweigh the broader phishing consensus in the available scan data. The domain string closely resembles a MetaMask login-themed name and the page title explicitly uses the MetaMask brand, which may indicate look-alike or impersonation behavior rather than an official support resource.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by a mainstream certificate authority and is served through Cloudflare infrastructure, with the resolved IP address associated with Cloudflare hosting in Canada. The certificate validity suggests encrypted transport was available at the time of testing, but HTTPS alone should not be treated as proof of legitimacy.
DNSSEC appears to be unsigned, and the page is hosted as a gitbook.io subdomain rather than on a dedicated brand-owned domain. No malicious files were identified in the provided file scan, but several internal URLs and the subdomain itself were heuristically flagged. From a technical trust perspective, the combination of third-party hosted content, brand-themed naming, and phishing classifications raises concern.
Share your experience with this website. Was it safe? Did you encounter any issues?