metrostandardtrade[.]org

metrostandardtrade.org is a phishing domain engaged in brand impersonation, specifically targeting DHL as part of an investment scam. The site, which presented itself under the title 'Metro Standard Trade - Leading trading platform,' posed as a legitimate trading platform to deceive users into believing it was affiliated with DHL. No drainer kit was identified on the domain. As of the latest analysis, the domain has been taken offline, indicating it is no longer accessible.

Technical indicators confirm the malicious nature of metrostandardtrade.org. VirusTotal reports 3 of 95 security vendors flag the domain, including Bfore.Ai PreCrime, CRDF, and Gridinsoft, with a Gridinsoft trust score of 0/100. The domain was registered on March 12, 2025, through Dynadot LLC and resolves to IP address 198.23.190.194, located in the US under AS36352 HostPapa. It appears on 1 security blocklist (PhishDestroy) and is not flagged by Google Safe Browsing. SSL certificate is issued by Let's Encrypt / R12, and the HTTP status returned is 429. The domain has MX records pointing to park-mx.above.com and uses a single nameserver.

Users who interacted with metrostandardtrade.org should take immediate safety steps. Since the threat is brand impersonation and an investment scam without a crypto drainer, the primary risk involves credential or login phishing. Change any passwords entered on the site, enable two-factor authentication on affected accounts, and monitor for unauthorized activity or fraud. Report the domain to relevant authorities such as the FTC or local cybersecurity agencies. No crypto wallet actions are needed as no drainer was present.