metawin-fe[.]pages[.]dev

This domain, metawin-fe.pages.dev, is flagged as an active crypto token scam targeting users of the $METAWIN presale. Analysis indicates the page impersonates a legitimate token sale under the guise of 'MetaWinners Community Token,' a likely fraudulent scheme designed to harvest wallet credentials and drain cryptocurrency assets. The threat type is classified as a crypto drainer, with infrastructure tailored to deceive users into connecting wallets to malicious smart contracts or phishing forms. Infrastructure analysis reveals the following technical indicators: the domain was registered on April 04, 2026, through Cloudflare, Inc., and currently resolves to the IP address 188.114.96.3, hosted by Cloudflare in Canada. The SSL certificate is issued by Google Trust Services (WE1), a common feature in phishing domains to appear legitimate. The domain appears on one security blocklist, and VirusTotal reports a detection rate of 1/95 security vendors. Google Safe Browsing status is not explicitly provided, but the domain remains unblocked by most major security platforms, increasing its potential reach. The domain remains active as of this report, with no evidence of takedown or remediation. While it is blocked by at least one security provider, the low detection rate suggests the infrastructure is still evading broader scrutiny. Users are advised to avoid interacting with the domain, particularly wallet connections or token transactions. Organizations should monitor for related indicators, including the IP address 188.114.96.3 and the domain registrar Cloudflare, Inc., for potential clustering with other malicious campaigns. The risk level remains high due to the active status and targeted nature of the scam.