kbjoinery[.]com[.]au

The domain kbjoinery.com.au has been identified as a brand impersonation phishing site specifically targeting MetaMask users. Security researchers at PhishDestroy classified this threat as high risk, indicating it likely employs a crypto drainer kit designed to steal cryptocurrency wallets and private keys from unsuspecting visitors. The site was registered through Web Address Registration Pty Ltd and is hosted at IP address 203.170.87.193. Its SSL certificate was issued by Let's Encrypt / R12, which is commonly abused by malicious actors due to the ease of obtaining free certificates.

Technical analysis reveals alarming indicators of malicious intent. VirusTotal reports that 11 out of 95 security vendors flag this domain, and it appears on at least 3 security blocklists. The domain was created on April 13, 2026, a very recent date that is typical of phishing operations. The page title displayed is "Not Acceptable!", which may indicate a server configuration issue or an intentional message to evade detection. Despite these red flags, the site is currently offline, suggesting it has been taken down or blocked.

As of the latest assessment, kbjoinery.com.au is no longer accessible, which is a positive outcome. However, users should remain vigilant as similar domains may appear. The remaining risk is that the operators may register new domains with slight variations. PhishDestroy strongly advises MetaMask users to only interact with official channels and to verify any website's legitimacy using our platform before connecting their wallets. Never enter your seed phrase or private keys on any website that you were redirected to via email, social media, or search ads.