hashmetasg[.]com

Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.

The domain hashmetasg.com was registered on July 16, 2026 through the registrar Gransy, s.r.o. and is currently served by the Cloudflare nameservers heather.ns.cloudflare.com and luke.ns.cloudflare.com. DNS resolution points to the IP address 172.67.131.130, which belongs to Cloudflare's global edge network and does not disclose a direct hosting provider. The domain has been scanned by 91 VirusTotal vendors; none of the vendors returned a detection, although the absence of a positive result does not constitute evidence of benign intent.

Independent security feeds have placed hashmetasg.com on a single blocklist and the domain is actively listed by the PhishDestroy blocking service. No additional public threat‑intel sources such as OTX or Google Safe Browsing are referenced in the available data. The short lifespan of the domain—created only eleven days prior to the report date—combined with its use of reputable DNS infrastructure suggests an attempt to leverage the perceived legitimacy of Cloudflare’s network to evade simple reputation checks. At present, the specific payload or targeted brand associated with the phishing campaign is not disclosed, and the website’s content has not been publicly analysed.

Consequently, the primary uncertainty revolves around the nature of the malicious content hosted on the domain and the intended victims. Defenders should proactively block hashmetasg.com at perimeter controls, monitor DNS queries for the associated Cloudflare nameservers, and incorporate the domain’s IP address into network‑level threat‑intel feeds. Continuous re‑scanning of the domain with sandbox and URL analysis tools is recommended to detect any future changes in payload or behavior. Organizations employing email filtering should add hashmetasg.com to deny‑list rules to reduce exposure to potential credential‑ harvesting attempts.