metamuaskingghlohgin[.]godaddysites[.]com

Analysis of metamuaskingghlohgin.godaddysites.com indicates the domain was registered on 21 Feb 2026 through GoDaddy.com, LLC. The site is served using a Go Daddy Secure Certificate Authority – G2 SSL certificate issued by GoDaddy.com, Inc., which is typical for domains hosted on the GoDaddy platform. DNS resolution points to IP 76.223.105.230, an address owned by Amazon.com, Inc. (AS16509) and geolocated to the United States. HTTP requests return a 404 Not Found status and the page title returned by the server is also “404 Not Found”, suggesting that the content has been removed or the site is currently inactive. The domain is presently listed as offline in the threat feed. Multiple security services have flagged the domain.

PhishDestroy and ScamSniffer have added it to their blocklists, and two additional public blocklists reference the host. On VirusTotal, 15 out of 93 scanning engines reported a detection, reinforcing the suspicion that the domain has been used for malicious activity. The classification in the feed is “generic phishing,” and the risk level is elevated. Available evidence confirms that the domain is associated with phishing activity, but the specific payload, target brand, or phishing kit has not been disclosed.

Because the site currently returns only a 404 page, the exact nature of the credential‑harvesting infrastructure cannot be verified at this time. Defenders should continue to block the domain at network perimeter and endpoint layers, monitor DNS queries for the host, and consider adding the associated IP address to deny lists, especially for traffic destined to Amazon‑hosted services. Ongoing collection of TLS handshakes, proxy logs, and any future content snapshots will be required to determine whether the domain becomes active again and to identify the phishing landing page or stolen credentials.