loggmaskmetha-uk34[.]godaddysites[.]com

The domain loggmaskmetha-uk34.godaddysites.com has been identified as a brand impersonation threat, specifically targeting GoDaddy users with a fraudulent MetaMask login page. This phishing site attempts to steal cryptocurrency wallet credentials by mimicking legitimate login interfaces. The page title, "Met𝓪Mask Login | Login," uses a stylized 'a' to evade simple text detection, and the site was registered through GoDaddy.com, LLC, ironically the same brand it impersonates.

Technical analysis reveals that the domain resolves to IP address 76.223.105.230 and was created on November 18, 2013, giving it an aged appearance to bypass domain age filters. VirusTotal flags it with 21 out of 95 security vendors marking it as malicious, and it appears on 2 separate security blocklists. The SSL certificate is issued by GoDaddy's own certificate authority, further lending a false sense of legitimacy. Google Safe Browsing status was not provided, but the high VT score strongly indicates malicious intent.

As of the latest check, the site has been taken offline, mitigating immediate risk. However, users who may have visited the page prior to takedown should be cautious, as credentials could have been harvested. PhishDestroy recommends that any user who encountered this page change their MetaMask and GoDaddy passwords immediately and enable two-factor authentication. The domain's registration through GoDaddy itself highlights the need for vigilance even when domains appear to be associated with trusted brands. Always verify URLs directly with the official website before entering sensitive information.