mata-masxxk-logijiiz[.]godaddysites[.]com

PhishDestroy identifies mata-masxxk-logijiiz.godaddysites.com as an active cryptocurrency drainer domain designed to deceive users into authorizing malicious transactions. The domain exhibits classic phishing behaviors, including impersonation of legitimate platforms and the use of deceptive subdomains to obfuscate its true origin. No specific brand or drainer kit was directly associated with this domain in known threat intelligence, but its structure suggests it may target users familiar with cryptocurrency services.

This domain was flagged by 11 out of 95 VirusTotal security vendors, indicating a significant but not universal detection rate. It is registered through GoDaddy.com, LLC, resolving to IP address 13.248.243.5. The domain was created on November 18, 2013, which may indicate either longevity or potential misuse of an older, trusted domain. GoDaddy’s Safe Browsing (GSB) status and broader blocklist counts were not explicitly detailed in the provided intelligence, but the domain remains active and poses an elevated risk.

As of the latest assessment, mata-masxxk-logijiiz.godaddysites.com remains active and continues to operate as a cryptocurrency drainer. Immediate actions include avoiding interaction with the domain, blocking the associated IP (13.248.243.5), and reporting the site to relevant authorities such as Google Safe Browsing or local cybercrime units. While the domain’s age and registrar may lend it an air of legitimacy, its current behavior and VirusTotal detection rate clearly classify it as a high-risk threat. Users are advised to exercise extreme caution and verify the authenticity of websites before engaging in financial transactions.