metalxjp[.]net

This domain, metalxjp.net, is flagged as a high-risk cryptocurrency phishing site targeting users of the Metal X platform. Analysis indicates the page title explicitly mimics "Metal X," suggesting an intent to deceive victims into believing they are interacting with the legitimate service. No specific drainer kit signatures have been confirmed, but the domain aligns with known phishing tactics used to harvest credentials or private keys from cryptocurrency wallet users. Infrastructure analysis reveals the following technical indicators: the domain was registered on June 24, 2026, through Gname.com Pte. Ltd., a registrar frequently associated with malicious registrations. It resolves to the IP address 188.114.96.3 and uses an SSL certificate issued by Google Trust Services, which may lend a false sense of legitimacy. VirusTotal reports 1/95 security vendors flagging the domain as malicious, indicating limited but confirmed detection. Google Safe Browsing (GSB) status is not explicitly provided, but the domain remains unblocked by most major blocklists, allowing it to operate unimpeded. As of the latest assessment, metalxjp.net remains active and continues to host phishing content. No takedown actions have been observed, and the domain’s infrastructure shows no signs of disruption. Users are advised to treat this domain as highly suspicious and avoid interaction. Organizations should consider blocking the domain and IP at the network level, while individuals should verify wallet addresses and URLs independently before engaging with any cryptocurrency-related service. The remaining risk is elevated due to the domain’s persistence and targeted impersonation of a known platform.