momabirds[.]com

This domain, momabirds.com, is identified as a generic phishing site impersonating the Moma Birds brand. Analysis indicates the site likely hosts fraudulent login pages designed to harvest user credentials or facilitate unauthorized transactions. No specific drainer kit signatures were confirmed, but the domain aligns with patterns observed in credential theft campaigns targeting art or e-commerce platforms. Infrastructure analysis reveals the domain was registered on February 21, 2026, through GoDaddy.com, LLC. It resolves to the IP address 76.223.105.230, hosted on Amazon.com, Inc. (AS16509) infrastructure in the United States. The domain appears on 3 security blocklists, and VirusTotal reports 9 out of 95 security vendors flagging it as malicious. The SSL certificate is issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2 chain. No Google Safe Browsing (GSB) entries were provided, but the domain is actively blocked by PhishDestroy, MetaMask, and SEAL. As of the latest assessment, momabirds.com has been taken offline, reducing immediate exposure risks. However, residual threats persist due to potential cached DNS entries or delayed updates in security filters. Organizations are advised to verify blocklist integrations and monitor for related domains registered under the same infrastructure or registrar. Users should be alerted to the impersonation of Moma Birds and instructed to report any suspicious login attempts or redirects associated with this domain.