meteora-ag[.]cc

This domain, www.meteora-ag.cc, is identified as a crypto wallet drainer phishing site designed to steal digital assets from unsuspecting users. Analysis indicates the site targets cryptocurrency wallet credentials, tricking visitors into connecting their wallets under false pretenses. Once connected, the site executes unauthorized transactions, draining funds without the user’s consent. The threat is classified as elevated due to its direct financial impact and the irreversible nature of cryptocurrency theft. Infrastructure analysis reveals the domain was registered on April 1, 2026, through NameSilo, LLC, a registrar frequently associated with high-risk domains. The site resolves to the IP address 104.19.168.112 and is currently flagged by 3 out of 95 security vendors on VirusTotal. Additionally, it appears on three security blocklists, including MetaMask and PhishDestroy, further confirming its malicious intent. The Gridinsoft trust score of 0/100 underscores the domain’s lack of legitimacy and high-risk classification. Users who have visited www.meteora-ag.cc or interacted with its content should immediately disconnect any connected wallets and revoke access to suspicious dApps. It is critical to transfer remaining assets to a new, secure wallet and monitor all connected accounts for unauthorized transactions. If credentials were entered, assume they are compromised and avoid reusing them. Report the domain to relevant security platforms to aid in broader threat mitigation efforts.