metacard[.]cards

This domain, metacard.cards, is identified as a cryptocurrency phishing site designed to harvest wallet credentials. Analysis of the page title, 'Securing access,' suggests an attempt to mimic legitimate security verification processes, likely targeting users of blockchain or digital asset platforms. No specific brand impersonation or drainer kit signatures were confirmed, but the generic phishing classification indicates broad-spectrum credential theft infrastructure. Infrastructure analysis reveals the following technical indicators: the domain is flagged by 5 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0/100. It was registered on May 01, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, an atypical future creation date that may indicate registry manipulation or data entry error. The domain resolves to IP address 104.21.80.77 and employs Cloudflare services, including HTTP/3 and Browser Insights, for traffic obfuscation. It appears on one security blocklist and is currently blocked by PhishDestroy. SSL certification is provided by Let's Encrypt, a common tool among threat actors to simulate legitimacy. As of the latest verification, metacard.cards has been taken offline, reducing immediate exposure risk. However, the underlying infrastructure remains a concern due to the domain's future registration date, which may indicate an attempt to evade reputation-based detection systems. Users who accessed this domain should assume credential compromise and revoke any wallet authorizations or session tokens. Network defenders are advised to monitor for related domains registered through the same registrar or resolving to the same IP range, as this infrastructure may be repurposed for future campaigns.