distribution-inspect[.]xyz

The domain distribution-inspect.xyz is associated with a brand impersonation scam targeting Metamask users. It has been taken offline, indicating a temporary cessation of its malicious activities. As such, it is deemed unsafe and a phishing threat, particularly focused on cryptocurrency scams.

Technical analysis reveals that distribution-inspect.xyz has been flagged by 2 of 95 vendors on VirusTotal, including alphaMountain.ai and Forcepoint ThreatSeeker. The domain was created on February 21, 2026, and resolves to the IP address 172.67.137.252, hosted in the US by Cloudflare, Inc. It appears on 1 security blocklist, specifically PhishDestroy, and its SSL certificate was issued by WE1.

To enhance safety after potential interactions with distribution-inspect.xyz, users should take immediate actions such as revoking token approvals and moving funds to a new wallet if they believe their cryptocurrency assets may have been compromised. Additionally, those who have shared credentials should consider changing their passwords, enabling two-factor authentication, and remain vigilant for signs of fraud. Users can report phishing attempts through relevant channels and security platforms.