meta-masksuppportsystem[.]nettis[.]sbs

This domain, meta-masksuppportsystem.nettis.sbs, was identified as a high-risk brand impersonation targeting MetaMask, a cryptocurrency wallet service. The domain was created on December 26, 2025, and registered through Spaceship, Inc. It resolved to the IP address 86.107.77.210, located in Germany and hosted by AS216395 (HostBet Cloud Technologies Private Limited). The domain lacked an SSL certificate, indicating no encryption for potential victims. VirusTotal flagged this domain with 14 out of 93 security vendors marking it as malicious, and it appeared on one security blocklist, specifically blocked by PhishDestroy.

Google Safe Browsing flagged the domain for social engineering, consistent with its scam nature. The page title, as captured, was "MetaMask Help Center," which directly impersonates MetaMask's official support portal. The domain's nameservers were ns17.netlightsystems.com and ns18.netlightsystems.com. As of the report date of July 23, 2026, the domain was taken offline and marked as offline.

The scam type is classified as a Crypto Scam, leveraging the MetaMask brand to deceive users. Defenders should ensure that this domain is blocked on all network and email security appliances, and monitor for similar domains registered through Spaceship, Inc. or hosted on the same IP range. Since the domain is offline, no immediate user action is required, but historical access logs should be reviewed for any prior visits. The exact content of the page was not analyzed beyond the title, so defenders should rely on the known threat indicators and blocklist presence.