metaxploit[.]com

The domain metaxploit.com was registered on May 26, 2026 through Dynadot Inc and currently resolves to the IP address 172.67.199.12. Early detection activity shows the domain appears on one public security blocklist and has been explicitly blocked by the PhishDestroy service, indicating that at least one reputable anti‑phishing feed has identified malicious use. VirusTotal scans report that six out of ninety‑one participating security vendors flag the domain as malicious, providing independent corroboration of its suspicious nature. The risk rating assigned to the infrastructure is elevated and the operational status is listed as active, suggesting ongoing exploitation attempts.

No additional public intelligence such as SSL certificate details, HTTP response codes, or page titles has been released, leaving the exact content and targeting tactics of the site unverified. Defenders should treat metaxploit.com as a high‑confidence phishing indicator and implement immediate network‑level blocks for the domain and its resolving IP. Continuous monitoring of DNS queries for this FQDN is advised, as well as inclusion of the domain in endpoint and email security allow‑lists for proactive detection.

Organizations using threat‑intel platforms should ingest the blocklist entry and the six vendor detections from VirusTotal to enrich detection rules. Because the registration information is publicly available, threat hunters may also query for other domains registered by the same Dynadot account to uncover potential related infrastructure. Until further forensic analysis of the web content is performed, the precautionary stance remains to deny any traffic to metaxploit.com and to alert users about the elevated phishing risk associated with this newly created domain.