metaexts[.]com

This domain, metaexts.com, was created on 10 October 2025 and is registered through BigRock Solutions Ltd. Infrastructure analysis shows it resolves to the IP address 162.241.85.94, which belongs to AS46606 Unified Layer located in the United States. The authoritative nameservers are rns19.webhostbox.net and rns20.webhostbox.net. No TLS certificate was observed, indicating the site operated without HTTPS. The page title returned by the HTTP response is “META -”, and the listed brand target is WordPress, confirming the activity as a brand‑impersonation campaign. Malware and URL reputation services have responded with a mixed signal: twelve of ninety‑five security vendors on VirusTotal flagged the domain as malicious, while Gridinsoft assigned a trust score of zero out of one hundred.

AlienVault OTX cites the domain in fifteen threat‑intel pulses, and it appears on a single security blocklist. PhishDestroy has already taken the domain offline, and current monitoring confirms the site is no longer reachable. The observable evidence points to a short‑lived impersonation infrastructure that leveraged a generic page title and the WordPress brand to lure victims. Because the domain is already offline, immediate impact is limited, but the underlying hosting provider and registrar have been used in other campaigns.

Defenders should continue to block the IP address 162.241.85.94 and add metaexts.com to local deny lists. Additional precaution includes monitoring future registrations from BigRock Solutions Ltd and the same WebhostBox name servers for patterns resembling the current impersonation technique. Continuous review of VirusTotal and OTX feeds will help detect re‑use of the same infrastructure. Organizations using WordPress should remain vigilant for unsolicited communications that reference unrelated “META” resources, as such lures may be tied to this abandoned campaign.