metatask[.]net

The domain metatask.net is currently flagged as a high-risk phishing resource impersonating MetaTask, an enterprise Business Process Management (BPM) platform. Analysis confirms the domain hosts a fraudulent login interface mimicking legitimate BPM software, designed to harvest credentials from corporate users. The campaign remains active as of the latest verification, with no indications of takedown or remediation. Infrastructure analysis reveals the domain resolves to the IP address 188.114.96.3 and was registered through InterNetX GmbH on May 24, 2026. Security vendor detections on VirusTotal indicate 15 of 95 engines classify the domain as malicious, while it appears on two independent security blocklists. The SSL certificate is issued by Let's Encrypt (serial number E8), a common tactic to lend superficial legitimacy to phishing infrastructure. The page title, 'MetaTask 2.0 | Enterprise BPM Platform,' directly mirrors branding used by the legitimate MetaTask service, increasing the likelihood of successful deception. Current monitoring confirms metatask.net remains operational, posing an ongoing threat to enterprise users. Organizations are advised to block the domain and its associated IP at the network perimeter. Endpoint protection rules should be updated to detect and prevent access to the domain. Security teams are further recommended to audit authentication logs for interactions with metatask.net and initiate password resets for any potentially compromised accounts. Due to the domain's recent creation date and active status, heightened vigilance is warranted for related phishing attempts.