metalxjp[.]com

This domain is flagged as a high-risk crypto drainer phishing site targeting cryptocurrency users through impersonation of the Metal X platform. Analysis indicates the domain is designed to execute unauthorized transactions, draining digital assets from victims' wallets upon interaction. The threat is classified as a crypto drainer due to its technical behavior and targeting of cryptocurrency-related credentials and wallet connections. Infrastructure analysis reveals the following technical indicators: the domain metalxjp.com was registered on June 24, 2026, through Metaregistrar BV and currently resolves to the IP address 188.114.96.3. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy. VirusTotal reports 2 out of 95 security vendors have flagged this domain as malicious, indicating limited but existing detection. The page title displayed is 'Metal X,' further confirming its impersonation of the legitimate platform. No known blocklists or trust scores have been widely adopted for this domain at the time of analysis, though its active status and recent registration suggest ongoing malicious activity. Mitigation steps specific to this crypto drainer threat include immediate blocking of the domain and associated IP address (188.114.96.3) at the network level. Users should be advised to revoke any wallet permissions granted to unknown or suspicious sites, particularly those mimicking Metal X. Organizations should monitor for unauthorized cryptocurrency transactions and educate users on recognizing impersonation tactics, such as checking domain registration dates and verifying SSL certificate issuers. Additionally, security teams should prioritize updating detection rules to include this domain and its indicators of compromise in threat intelligence feeds.