metaxseed[.]xyz

PhishDestroy identifies metaxseed.xyz as an active crypto drainer scam site, designed to trick users into entering seed phrases or private keys under the guise of a legitimate recovery tool. This domain exemplifies a high-risk phishing variant where threat actors harvest cryptocurrency wallet credentials to drain funds instantly. The deceptive domain employs social engineering tactics, mimicking authentic services to exploit user trust and facilitate financial theft. Given its association with cryptocurrency wallet compromise, the risk level for this domain is classified as active and under investigation, with immediate remediation advised for any users who may have interacted with it. This domain was flagged by PhishDestroy with the following technical indicators: it resolves to IP address 172.67.213.226, was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, and was created on April 03, 2026. Currently, VirusTotal reports 0 detections out of 95 security engines, indicating it remains undetected by most antivirus and threat intelligence platforms. The domain is secured with a Let’s Encrypt SSL certificate, which is commonly used by threat actors to appear legitimate. While no known listings on public blocklists were detected at the time of analysis, the absence of detections underscores the importance of proactive threat intelligence rather than reactive measures. The domain’s recent registration date and low detection profile suggest it is a newly deployed threat vector. Users must avoid entering sensitive information such as seed phrases, private keys, or wallet recovery phrases on metaxseed.xyz under any circumstances. In the event of potential exposure, immediately transfer remaining funds to a new, secure wallet and revoke any connected smart contract permissions. Enable multi-factor authentication on all crypto accounts and monitor wallets for unauthorized transactions. Report the domain to PhishDestroy and local cybersecurity authorities to aid in global threat disruption. Always verify URLs and domain legitimacy through multiple sources, including official project websites and trusted security tools, before interacting with crypto-related services.