lighterapp[.]mssg[.]me

On July 24, 2026, lighterapp.mssg.me was classified as a high‑risk generic phishing site. The domain was registered on February 21, 2026 through Key‑Systems GmbH and resolves to the Cloudflare‑owned address 104.26.12.20 (AS13335, United States). DNS resolution is served by Cloudflare nameservers deb.ns.cloudflare.com and guss.ns.cloudflare.com. An HTTPS endpoint is available using a Let’s Encrypt certificate (issued by E7). The web server returns HTTP 200 and presents the page title “Create website for free | Website builder – mssg.me”.

Automated analysis detected the presence of HSTS, Google Tag Manager, Google Analytics, Cloudflare Browser Insights and Cloudflare services. VirusTotal recorded a single positive detection out of 93 scanning engines, and the domain appears on three external blocklists. It is presently blocked by PhishDestroy, MetaMask and SEAL. The Gridinsoft trust score is 0/100, indicating a lack of confidence in the host. The presence on three security blocklists, combined with the single VirusTotal positive, suggests that the site has attracted limited but notable scrutiny from security vendors.

The high risk rating reflects the potential for credential harvesting given the generic phishing classification. The use of reputable CDNs and analytics services does not mitigate the malicious intent, but rather provides the attacker with performance and tracking capabilities. No additional intelligence regarding the phishing payload, targeted credentials, or lure content has been published, so the exact victim‑facing technique remains unknown. Defenders should continue to block the domain at network perimeters, update DNS filtering rules to include the observed IP and nameservers, and monitor for any new detections from additional scanning services. Continuous re‑evaluation is advised, as the site remains active and may evolve its payload or hosting configuration.