metadao[.]ranger[.]sale

The domain metadao.ranger.sale is a confirmed phishing site engaged in brand impersonation targeting the 'across' platform. It presents itself as a legitimate service to deceive users into connecting wallets, a tactic known as wallet-connect phishing, but does not deploy a crypto drainer kit. As of the latest verification, metadao.ranger.sale has been taken offline, though it previously posed an elevated risk to users.

Technical analysis reveals that metadao.ranger.sale was flagged by 2 of 95 VirusTotal security vendors, including Gridinsoft and SOCRadar, with a Gridinsoft trust score of 0/100. The domain appears on 2 security blocklists, specifically PhishDestroy and ScamSniffer, and was created on February 21, 2026. It resolved to the IP address 172.67.130.170, hosted on Cloudflare's infrastructure (AS13335) in the US, and used an SSL certificate issued by WE1. The observed page title was 'MetaDAO', and Google Safe Browsing did not flag it at the time of assessment.

Users who interacted with metadao.ranger.sale should immediately revoke any token approvals granted to the site via wallet management tools like Etherscan or Revoke.cash. Move funds to a new, secure wallet to mitigate potential risks. If credentials were entered, change passwords for the affected accounts and enable two-factor authentication (2FA). Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the impersonated brand's security team to aid in takedown efforts and protect others from similar scams.