metawalletintelligence[.]com

This domain is flagged as a high-risk crypto drainer, designed to exfiltrate cryptocurrency wallet credentials and drain funds from compromised accounts. Analysis indicates the domain is actively targeting users through deceptive wallet interfaces, leveraging social engineering to trick victims into authorizing unauthorized transactions. Infrastructure analysis reveals the domain metawalletintelligence.com was registered on May 23, 2026, through Cloud Yuqu LLC. It resolves to the IP address 76.223.54.146, hosted on AWS Global Accelerator infrastructure in the US. The domain appears on three security blocklists and is currently blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal detection shows 1 out of 95 security vendors flagging the domain as malicious. The SSL certificate is issued by GoDaddy.com via the GoDaddy TLS Intermediate CA DV - R1v1, a common certificate authority used in both legitimate and malicious domains. Mitigation against this crypto drainer requires immediate action. Users should block the domain and its resolving IP (76.223.54.146) at the network level. Wallet software should be configured to reject connections to untrusted domains, and transaction signing should be restricted to verified interfaces. Organizations should update endpoint detection rules to include this domain and its associated indicators. Due to the high-risk nature of crypto drainers, any interaction with this domain should be treated as a security incident requiring forensic analysis of affected systems.