6rdkr[.]mssg[.]me

Analysis indicates the domain 6rdkr.mssg.me is actively involved in a brand impersonation campaign targeting Facebook, as of July 12, 2026. The domain was registered on January 24, 2017, through Key-Systems GmbH and currently resolves to IP address 172.67.75.137. Infrastructure analysis reveals the use of Cloudflare, including Cloudflare Browser Insights, alongside tracking technologies such as Google Tag Manager, Google Analytics, and Facebook Pixel. The page title, '№6 Crypto Brilliant,' suggests a focus on cryptocurrency-related content, though the exact nature of the scam remains under investigation. The domain has been assigned a Scamadviser trust score of 12/100 and a Gridinsoft trust score of 0/100, reflecting low confidence in its legitimacy. It appears on at least one security blocklist and is currently blocked by PhishDestroy. The SSL certificate is issued by Let's Encrypt, which is consistent with both legitimate and malicious domains. No detections were reported by the 95 vendors that scanned the domain on VirusTotal, though this absence does not confirm safety. Defenders should treat this domain as high-risk due to its active status, brand impersonation classification, and low trust scores. Monitoring for additional indicators of compromise, such as associated IP ranges or newly registered domains under the same registrar, is recommended. If the domain is encountered in network logs or user reports, it should be blocked or flagged for further review. The lack of vendor detections on VirusTotal does not reduce the risk, as phishing campaigns often evade initial detection. Further analysis of the site's content and behavior is necessary to determine the full scope of the threat.