# metexren.info — MALICIOUS

> PhishDestroy identifies metexren.info as a fake streaming service phishing site flagged by 10/95 VirusTotal vendors. Check the full report.

## Summary
PhishDestroy identifies metexren.info as an active phishing domain designed to impersonate a legitimate streaming service, tricking users into entering sensitive login credentials or payment information. This site mimics a popular streaming platform’s interface to deceive visitors into believing it is authentic, often spreading through fraudulent emails, ads, or social media links. Once credentials are submitted, attackers can hijack accounts or steal financial data for further abuse or sale on dark web markets.

This domain was flagged by 10 out of 95 VirusTotal security vendors, indicating a significant but not universal detection rate among cybersecurity tools. Registered on March 18, 2026, through PDR Ltd. d/b/a PublicDomainRegistry.com, the site uses a Let’s Encrypt SSL certificate to appear legitimate and resolves to IP address 162.241.85.94. Its recent creation suggests this is a short-lived campaign, a common tactic to avoid prolonged scrutiny by security researchers and law enforcement.

If you visited metexren.info, avoid entering any personal or payment details immediately. Log out of any accounts you may have accessed and change those passwords from a trusted device. Run a malware scan on your system using reputable antivirus software to check for any unauthorized access or data theft. Report the domain to your cybersecurity team or through platforms like PhishDestroy to help protect others from this threat. Always verify website URLs carefully and use official apps or bookmarks for streaming services.

## Threat Details
- Verdict: MALICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-18 14:28:30
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com
- IP: 162.241.85.94

## Detection Status
- VirusTotal: 10 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/d1f5f87b-e9dc-4ac7-a0d2-b2086094e641
- PhishDestroy: https://phishdestroy.io/domain/metexren.info/
- LLM endpoint: https://phishdestroy.io/domain/metexren.info/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/metexren.info/
Last updated: 2026-03-22