meteox[.]trade

The domain meteox.trade was registered on 18 May 2026 through the registrar Key‑Systems LLC. DNS resolution points exclusively to the IPv4 address 3.255.27.71, which is served by the hoststar.hosting name‑servers ns1.hoststar.hosting and ns2.hoststar.hosting. The domain is currently active and appears on three public security blocklists, indicating that at least three independent threat‑intelligence feeds have flagged it as malicious. VirusTotal analysis shows that four out of ninety‑one scanned security vendors have raised a detection for the domain, confirming that automated scanners have observed suspicious characteristics.

The domain is also listed by the commercial blocklists PhishDestroy, MetaMask, and SEAL, reinforcing the consensus that it is being used for phishing‑related operations. No public SSL certificate information, HTTP response codes, or page‑title data are available in the current intelligence set, so the exact content served by the site cannot be confirmed. Likewise, no attribution to a specific phishing kit or targeted brand has been disclosed.

Given the recent creation date, the active status, and the presence on multiple blocklists, the infrastructure should be considered high‑risk. Defensive operators are advised to deny network traffic to 3.255.27.71, add meteox.trade to URL filtering and email‑gateway block lists, and monitor for any future DNS changes or additional indicators that may emerge from subsequent scans. Continuous re‑evaluation of VirusTotal and other sandbox results is recommended to capture any evolving payloads.