mit-amasklof-gen[.]godaddysites[.]com

The domain mit-amasklof-gen.godaddysites.com poses an elevated risk of brand impersonation, specifically targeting users of GoDaddy services. The domain attempts to deceive visitors by mimicking the Metamask login page, which could lead to the theft of sensitive information such as login credentials and personal data.

Analysis indicates that the domain was registered through GoDaddy.com, LLC and created on November 18, 2013. It is currently offline, but it has been flagged by 17 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion. The domain was also listed on two security blocklists, PhishDestroy and PhishingDB, indicating that it has been used in phishing campaigns. The SSL certificate was issued by GoDaddy.com, Inc. / Go Daddy Secure Certificate Authority - G2, which adds a layer of credibility to the deception.

If users have visited this domain, they should immediately check their accounts for any unauthorized activity and change their passwords. It is recommended to enable two-factor authentication (2FA) for all relevant accounts to add an additional layer of security. Users should also monitor their financial statements and credit reports for any signs of fraud. Reporting the incident to the appropriate service provider and security authorities is advised to prevent further damage and to assist in the investigation of the phishing infrastructure.