metafalcon[.]biz

PhishDestroy identifies metafalcon.biz as a confirmed crypto drainer scam designed to steal cryptocurrency from unsuspecting users. The domain mimics legitimate crypto platforms by exploiting branding familiarity, particularly targeting MetaMask users. Upon interaction, the site likely deploys malicious scripts to drain wallets of connected tokens and assets, posing severe financial risks. The threat is automated, scalable, and targets decentralized finance (DeFi) enthusiasts seeking quick gains or urgent transaction confirmations.

This domain was flagged by PhishDestroy with zero VirusTotal detections (0/95), indicating undetected malicious activity. Registered through GoDaddy.com, LLC, the domain was created suspiciously on January 25, 2026—an unusually recent date for a site claiming crypto services. It resolves to IP 188.114.97.3 and uses a Google Trust Services SSL certificate, which may mislead users into believing the site is legitimate. Despite its newness, the absence of detection underscores the need for proactive verification tools like PhishDestroy to identify emerging threats.

If you visited metafalcon.biz, disconnect your wallet immediately and revoke any unauthorized token approvals via your wallet’s interface or a trusted service like Etherscan. Scan your device for malware and consider transferring remaining assets to a new, secure wallet. Report the domain to PhishDestroy and your wallet provider to help block its spread. Always verify URLs manually and use hardware wallets for high-value transactions to mitigate crypto drainer risks.