# meteoramarket.xyz — SUSPICIOUS

> Warning: meteoramarket.xyz is a confirmed crypto drainer phishing site flagged by 1/95 VirusTotal vendors. Verify safety before interacting via PhishDestroy.

## Summary
PhishDestroy has identified meteoramarket.xyz as a high-risk crypto drainer domain designed to trick users into connecting malicious cryptocurrency wallets. This fraudulent platform mimics legitimate crypto marketplaces to lure victims into authorizing fraudulent token approvals or transferring funds directly to attacker-controlled wallets. Security researchers have observed active distribution through social engineering campaigns, particularly targeting users interested in decentralized finance (DeFi) trading. The threat level is elevated due to the domain’s recent creation and low detection rate among security vendors.  This domain was flagged by only 1 out of 95 VirusTotal security vendors, indicating poor detection coverage despite its malicious nature. Registered through NameSilo, LLC on March 19, 2026, the domain resolves to IP address 104.21.94.135 and utilizes a Let’s Encrypt SSL certificate to appear legitimate. The recent registration date (mere days old) and single-blocklist detection suggest this is a freshly deployed campaign with potential for rapid expansion. These technical indicators highlight the domain’s low-profile evasion tactics, which rely on delayed recognition by security ecosystems.  Users who visited meteoramarket.xyz should immediately revoke any crypto wallet permissions granted to the site using tools like revoke.cash or your wallet’s built-in dApp connection manager. Do not interact with wallet connection prompts or sign any transactions on this domain. Clear your browser cache and disable browser extensions that may have interacted with the site. Report the domain to PhishDestroy to help block future victims. Monitor wallet transactions closely for unauthorized activity.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-19 20:48:30
- Registrar: NameSilo, LLC
- IP: 104.21.94.135

## Detection Status
- VirusTotal: 1 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/9cb7c397-684a-4d2d-9808-c16b71acd8f3
- PhishDestroy: https://phishdestroy.io/domain/meteoramarket.xyz/
- LLM endpoint: https://phishdestroy.io/domain/meteoramarket.xyz/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/meteoramarket.xyz/
Last updated: 2026-03-22