inspectxyz[.]website

The domain inspectxyz.website is a phishing site engaged in brand impersonation targeting MetaMask users, classified as a cryptocurrency scam. It falsely presents itself as a platform for mining $TAO, attempting to deceive victims into disclosing sensitive information or transferring digital assets. As of the latest verification, inspectxyz.website has been taken offline, though it previously posed an elevated risk due to its fraudulent activities.

Technical analysis reveals that inspectxyz.website was flagged by 1 of 95 VirusTotal security vendors, including alphaMountain.ai. The domain appears on 5 security blocklists, specifically PhishDestroy, ScamSniffer, Polkadot, Enkrypt, and Codeesura. It was created on February 21, 2026, and resolved to the IP address 172.67.195.66, hosted by Cloudflare, Inc. (AS13335) in the US. The SSL certificate was issued by WE1, and the observed page title was 'Inspect Substrike | Start Mining $TAO in Minutes'. Gridinsoft assigned the domain a trust score of 0/100, further confirming its malicious nature.

Victims who interacted with inspectxyz.website should immediately revoke any token approvals granted to unknown contracts and transfer remaining funds to a new, secure wallet. If credentials or private keys were entered, users must change passwords for all associated accounts and enable two-factor authentication where available. Report the incident to MetaMask support and relevant authorities, such as local cybercrime units or platforms like the FBI’s IC3. Additionally, submit the domain to Google Safe Browsing and other threat-intelligence feeds to prevent further exploitation.