metaamoskk-laggeeniss[.]godaddysites[.]com

This domain, metaamoskk-laggeeniss.godaddysites.com, has been assessed as a high-risk threat due to its specific brand impersonation of MetaMask. The site was designed to trick users into entering their credentials on a fake login page titled "Met𝖆mask | Login," employing a homoglyph character to visually mimic the legitimate brand. The risk level is elevated because the domain was actively hosted and likely used in targeted phishing campaigns before being taken offline.

Technical indicators paint a clear picture of malicious intent. VirusTotal flagged the domain with 20 out of 95 security vendors, and it appeared on three separate security blocklists. The domain was registered through GoDaddy.com, LLC on February 21, 2026, and resolved to IP address 13.248.243.5. The SSL certificate was issued by GoDaddy.com, Inc. / Go Daddy Secure Certificate Authority - G2, lending an air of false legitimacy. Despite being taken offline, the domain's creation date and hosting details remain valuable for threat intelligence and future detection.

To protect against such brand impersonation attacks, users should always verify the URL before entering credentials, especially for crypto wallets like MetaMask. Enable multi-factor authentication on all accounts and use a password manager to auto-fill credentials only on known, legitimate domains. Organizations should monitor for similar domains using homoglyph characters and report them to registrars for takedown. PhishDestroy recommends blocking the IP 13.248.243.5 and adding the domain to blocklists to prevent accidental access.