mttaamu-sskk-lagn[.]godaddysites[.]com

The domain mttaamu-sskk-lagn.godaddysites.com has been identified as a crypto drainer threat, specifically impersonating the MetaMask brand to harvest cryptocurrency wallet credentials. This phishing site is currently offline, but its infrastructure remains a risk. The domain was created on February 21, 2026, and is registered through GoDaddy.com, LLC, with an SSL certificate issued by GoDaddy.com, Inc. It resolves to IP address 76.223.105.230 and appears on 2 security blocklists. VirusTotal analysis shows 19 out of 95 security vendors flagging this domain as malicious, indicating a significant threat level.

Given the site's impersonation of MetaMask, users who may have interacted with it could have exposed their private keys or seed phrases, leading to potential loss of cryptocurrency. The elevated risk level underscores the sophisticated nature of this phishing campaign. PhishDestroy recommends that any user who visited this domain immediately transfer assets to a new wallet and enable two-factor authentication where possible. Additionally, users should only access MetaMask through official channels and verify URLs carefully. As the site is offline, further monitoring is advised in case of domain resurrection or similar threats.