metamaskrewards[.]dappbind[.]com

This domain, metamaskrewards.dappbind.com, is currently flagged as a high‑risk crypto drainer. The registration record shows it was created on 08 April 2026 through NameSilo, LLC, and the authoritative name servers are carlos.ns.cloudflare.com and linda.ns.cloudflare.com, indicating Cloudflare DNS services. DNS resolution points to the IPv4 address 188.114.97.3, a host that is publicly listed on at least one security blocklist and has been blocked by the PhishDestroy feed. VirusTotal analysis reports that 2 of 91 static‑analysis engines have raised detections for this domain, confirming that malicious activity is observed by a minority of scanners.

The domain appears on a single external blocklist, reinforcing the view that community‑driven threat feeds consider it suspicious. All available indicators suggest the infrastructure is actively used; the threat intelligence entry marks the status as “still active” and the risk level as high. No public SSL certificate details, HTTP response codes, or page‑title information are presently available, so the exact content served by the site cannot be described. Defenders should add 188.114.97.3 to network‑level deny lists, block DNS queries for metamaskrewards.dappbind.com, and ensure that any email or web traffic that references the domain is quarantined.

Monitoring of Cloudflare name‑server changes and periodic rescans with VirusTotal or other multi‑engine platforms are recommended to detect any evolution of the payload or additional detections. Organizations using MetaMask or related cryptocurrency wallets should educate users about unsolicited reward offers that reference the domain, as the naming pattern mimics legitimate services but is not confirmed to host a genuine interface. Continuous threat‑intel feed updates and endpoint protection rules that reference the known indicators of compromise will help mitigate the risk posed by this active crypto‑draining campaign.