# metafalcon.biz — SUSPICIOUS

> PhishDestroy warns metafalcon.biz operates as a crypto drainer impersonating MetaMask. This domain has 0/95 VirusTotal detections despite active phishing.

## Summary
PhishDestroy identifies metafalcon.biz as a confirmed crypto drainer scam designed to steal cryptocurrency from unsuspecting users. The domain mimics legitimate crypto platforms by exploiting branding familiarity, particularly targeting MetaMask users. Upon interaction, the site likely deploys malicious scripts to drain wallets of connected tokens and assets, posing severe financial risks. The threat is automated, scalable, and targets decentralized finance (DeFi) enthusiasts seeking quick gains or urgent transaction confirmations.

This domain was flagged by PhishDestroy with zero VirusTotal detections (0/95), indicating undetected malicious activity. Registered through GoDaddy.com, LLC, the domain was created suspiciously on January 25, 2026—an unusually recent date for a site claiming crypto services. It resolves to IP 188.114.97.3 and uses a Google Trust Services SSL certificate, which may mislead users into believing the site is legitimate. Despite its newness, the absence of detection underscores the need for proactive verification tools like PhishDestroy to identify emerging threats.

If you visited metafalcon.biz, disconnect your wallet immediately and revoke any unauthorized token approvals via your wallet’s interface or a trusted service like Etherscan. Scan your device for malware and consider transferring remaining assets to a new, secure wallet. Report the domain to PhishDestroy and your wallet provider to help block its spread. Always verify URLs manually and use hardware wallets for high-value transactions to mitigate crypto drainer risks.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-01-25 15:21:38
- Registrar: GoDaddy.com, LLC
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/4f54f889-78dc-488e-a781-f5f1ba1ffe9e
- PhishDestroy: https://phishdestroy.io/domain/metafalcon.biz/
- LLM endpoint: https://phishdestroy.io/domain/metafalcon.biz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/metafalcon.biz/
Last updated: 2026-03-29