business[.]metadscredit[.]com

PhishDestroy identifies business.metadscredit.com as a high-risk crypto drainer phishing domain actively harvesting cryptocurrency and credentials under the false pretense of business credit services. This domain was flagged by Google Safe Browsing under SOCIAL_ENGINEERING and currently maintains a live presence, indicating active malicious operations. Users who interact with this site risk irreversible cryptocurrency loss through unauthorized wallet drainers or credential harvesting via spoofed onboarding forms. The domain business.metadscredit.com was created on August 19, 2025, and is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to IP address 188.114.97.3 and holds a Google Trust Services SSL certificate. Security monitoring confirms 10 out of 95 VirusTotal vendors flag this domain, and it is included on Google Safe Browsing’s SOCIAL_ENGINEERING blocklist. Despite recent creation, the site has already been identified as a threat vector, highlighting the rapid deployment tactics used by cybercriminals to exploit new domains for fraud. Mitigation requires immediate action: block access to business.metadscredit.com at the firewall and DNS level across organizational networks. Do not engage with the site or submit any credentials or cryptocurrency wallet connections. Report the domain to your security team and to Google Safe Browsing or PhishDestroy for further takedown action. Organizations should also audit any recent outbound connections to this IP and inspect endpoints for signs of crypto drainer malware or credential theft activity. Use real-time threat intelligence feeds to monitor for similar newly registered domains mimicking business credit service providers.