metcapitalsgroup[.]com

The domain metcapitalsgroup.com is a confirmed phishing site engaged in brand impersonation targeting the cryptocurrency platform 'base'. It operated as a cryptocurrency scam, designed to deceive users into believing they were interacting with the legitimate 'base' brand. As of the latest verification, metcapitalsgroup.com has been taken offline, though prior activity posed an elevated risk to potential victims.

Technical indicators confirm the malicious nature of metcapitalsgroup.com. The domain was flagged by 2 of 95 security vendors on VirusTotal, including alphaMountain.ai and Fortinet, and appeared on 1 security blocklist (PhishDestroy). Registered through Sav.com, LLC on April 26, 2025, it resolved to the IP address 107.172.61.186, hosted by AS36352 (HostPapa) in the US. The SSL certificate was issued by Let's Encrypt (R12), and the observed page title was 'metcapitalsgroup.com.'. Technologies detected on the site included YouTube, UIKit, LiteSpeed, Cloudflare, Smartsupp, jQuery, crypto-js, and cdnjs. Gridinsoft assigned the domain a trust score of 0/100, further indicating its fraudulent intent.

Users who interacted with metcapitalsgroup.com should immediately revoke any token approvals granted to the site and transfer remaining funds to a new, secure wallet. Monitor transaction histories for unauthorized activity and enable two-factor authentication on all cryptocurrency-related accounts. Report the domain to relevant platforms, including the impersonated brand 'base', and submit it to anti-phishing initiatives such as Google Safe Browsing or the Anti-Phishing Working Group (APWG) to prevent further abuse.