metramon[.]com

metramon.com entered the PhishDestroy evidence set on Jun 22, 2026. The stored content classification is generic phishing. The assembled evidence scores 100/100 (critical).

One independent source is positive: VirusTotal. VirusTotal recorded 20 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, ArcSight Threat Intelligence, BitDefender, Chong Lua Dao, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, PREBYTES, Seclookup, SOCRadar, Sophos, Viettel Threat Intelligence, VIPRE, Webroot on Jul 28, 2026 at 02:53 UTC. The evidence is not unanimous. On Jun 22, 2026 at 22:10 UTC, AlienVault OTX listed 7 community pulse references (not vendor detections); Google Safe Browsing returned no flag. The external blocklist snapshot contained no matches on Aug 7, 2026 at 18:20 UTC. URLScan completed without a malicious verdict (score 0) on Jun 23, 2026 at 08:12 UTC.

HTTP 308 was recorded on Aug 7, 2026 at 10:19 UTC. Registration records for the domain list CNOBIN INFORMATION TECHNOLOGY LIMITED as the registrar and Mar 15, 2026 as the creation date. At collection time, the hostname resolved to 172.67.161.17 (AS13335 Cloudflare, Inc.). The recorded endpoint location is San Francisco, US. Captured page title: “metramon.com”. DOM analysis completed on Jul 10, 2026 at 18:20 UTC; stored DOM score 98/100. The evidence archive retains 1 visual capture from PhishDestroy. IoC extraction completed on Jul 29, 2026 at 01:59 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt / E8 as the certificate issuer with validity through Aug 11, 2026; checked Jul 9, 2026 at 01:00 UTC.

No target brand has been confirmed from stored page content; hostname wording alone is not treated as brand evidence.