metrotechtradings[.]com

The domain metrotechtradings.com has been assessed as a high-risk phishing threat, currently active as of July 12, 2026. Analysis indicates that the domain was created on November 15, 2025, and is registered through TuringSign Inc., operating under the brand Cosmotown. It resolves to the IP address 163.61.188.7, which may be associated with other malicious activities, though specific evidence regarding its historical use was not available. The domain features a page titled 'Metrotech Tradings - Home' and employs various web technologies such as PHP, Bootstrap, and jQuery, which are commonly utilized in phishing schemes to create legitimate-looking interfaces.

The domain has been identified in 16 threat intelligence pulses on AlienVault OTX, indicating widespread recognition amongst security professionals. Its low trust score of 41/100 from Scamadviser and a notably poor score of 4/100 from Gridinsoft further underscore its potential risk. Additionally, it has been flagged by 14 out of 95 security vendors on VirusTotal, highlighting its presence on multiple security radars. The domain is also blocked by known security solutions, specifically PhishDestroy and BLP-Malware, which suggests that it is actively being targeted for its phishing activities.

Defenders should prioritize monitoring the domain and associated IP address for potential phishing attempts aimed at compromising user credentials or delivering malware. Given that this domain appears on two security blocklists, organizations would benefit from implementing comprehensive filtering rules to mitigate exposure risks. Continuous evaluation of traffic directed to and from metrotechtradings.com is recommended to identify any attempts to leverage this phishing domain in broader attacks. Overall, the findings present a clear indication of the threat posed by this domain, warranting immediate attention and precautionary measures.