dashboard-meteora[.]xyz

This domain, dashboard-meteora.xyz, is confirmed as a generic phishing site targeting cryptocurrency wallet users. Analysis indicates the site employs a German-language loading page ('Nur einen Moment…') commonly associated with credential harvesting or wallet-draining kits. No specific brand impersonation is evident, but the infrastructure aligns with known phishing campaigns distributing fake wallet interfaces or malicious browser extensions. Infrastructure analysis reveals the domain was registered on October 31, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com and resolves to IP address 188.114.97.3. Detection metrics include a VirusTotal score of 13/95 security vendors flagging the domain as malicious, with a Gridinsoft trust score of 0/100. The domain appears on one security blocklist and was previously categorized as 'elevated' risk prior to takedown. Google Safe Browsing (GSB) status is not explicitly listed, but the domain’s offline status suggests mitigation efforts. The domain is currently offline, likely due to registrar intervention or hosting provider action. While no active threat persists, residual risk remains for users who may have interacted with the site prior to takedown. Organizations are advised to block the domain and IP at perimeter defenses, monitor for related indicators (e.g., 188.114.97.3), and review logs for connections to dashboard-meteora.xyz during its active period. No further malicious infrastructure linked to this campaign has been identified at this time.