demo[.]metaledgerlabs[.]com

PhishDestroy identifies demo.metaledgerlabs.com as a live crypto drainer domain impersonating MetaLedger Labs infrastructure. The domain leverages a drainer kit designed to siphon cryptocurrency from unsuspecting victims, likely targeting users expecting MetaLedger-related services. The infrastructure is actively hosted and resolves to the IP 64.29.17.1, indicating a freshly provisioned environment typical of opportunistic campaigns.

This domain was flagged with a VirusTotal detection score of 0/95 as of March 19, 2026, suggesting it remains under the radar of major scanners. It was registered through HOSTINGER operations, UAB, a hosting provider known for low-cost, high-volume domains. The domain itself was created on March 19, 2026, aligning with the timeline of the drainer’s deployment. No blocklist entries were found, and the SSL certificate—issued by Let’s Encrypt—adds superficial legitimacy. Current threat intelligence shows no active takedown or warning from Google Safe Browsing (GSB), leaving users exposed.

The domain remains active and under investigation, with a high-risk potential due to its crypto drainer functionality and unblocked status. Users are strongly advised to avoid interaction and verify the legitimacy of any MetaLedger Labs-related communications via PhishDestroy’s platform. The remaining risk is high, as the drainer kit is operational and evading detection, posing a direct threat to cryptocurrency holdings. Immediate action is recommended to prevent financial loss.