mettaii-us-massk-loggeen[.]godaddysites[.]com

The domain mettaii-us-massk-loggeen.godaddysites.com was created on 18 November 2013 through GoDaddy.com, LLC and is served by the authoritative name servers cns1.secureserver.net and cns2.secureserver.net. Resolution points to the IP address 13.248.243.5, an Amazon.com, Inc. host within the United States (AS16509). The TLS certificate presented is issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority – G2, matching the registrar and indicating a legitimate certificate chain despite the malicious use.

HTTP probing returns a 404 Not Found status and the page title mirrors this, confirming that the site currently serves no content. The domain has been observed on a single security blocklist and is listed as blocked by the PhishDestroy service. VirusTotal analysis recorded 11 detections out of 95 scanning engines, providing independent confirmation of malicious classification.

As of the report date, the site is offline, limiting immediate threat exposure, yet the infrastructure components—Amazon hosting, GoDaddy registration, and a valid SSL certificate—demonstrate a pattern of leveraging reputable services to obscure malicious activity. Defenders should continue to monitor the associated IP address and host ASN for any re‑activation, enforce blocklist entries, and incorporate the domain and its IP into intrusion detection signatures. Because the page content is not available, further investigative work is required to determine the specific phishing payload or credential‑harvesting mechanisms that may have been hosted when the site was active.