meta-msk-us-loggin[.]godaddysites[.]com

This domain is flagged as a high-risk brand impersonation threat targeting GoDaddy, with evidence of active phishing infrastructure. The page title, Met𝓪Mask Login | Login | Signup, indicates an attempt to impersonate MetaMask, a cryptocurrency wallet service, while the domain itself uses a GoDaddy-branded subdomain (godaddysites.com) and is registered through GoDaddy.com, LLC. The domain creation date of November 18, 2013, suggests it was originally registered for a different purpose but is now repurposed for malicious activity. Infrastructure analysis reveals the domain resolves to IP address 13.248.243.5 and uses a GoDaddy SSL certificate, along with technologies including GoDaddy Website Builder, RequireJS, Re:amaze, and HSTS. The Gridinsoft trust score is 0 out of 100, indicating strong suspicion of malicious intent. VirusTotal detections show 15 out of 95 security vendors flagging this domain, and it appears on 2 security blocklists, including PhishDestroy and PhishingDB. The domain remains active as of the report date. Defenders should block access to this domain at the network and email gateway levels, monitor for any associated subdomains or IP ranges, and investigate any user interactions or credentials submitted to this site. Uncertainty remains regarding the full scope of the phishing campaign, including whether additional domains or hosting infrastructure are involved, and whether the site serves as a credential harvester or a multi-stage attack. Immediate action should include alerting affected users and conducting a review of any compromised accounts or systems.