metmski-logi-us[.]godaddysites[.]com

This domain is flagged as a high-risk phishing infrastructure designed to harvest user credentials through fake login portals. Analysis indicates the threat type is generic_phishing, targeting unsuspecting users with fraudulent authentication interfaces to capture sensitive account details. Infrastructure analysis reveals the domain metmski-logi-us.godaddysites.com was registered on February 21, 2026, through GoDaddy.com, LLC. It resolves to IP address 13.248.243.5, hosted on Amazon.com, Inc. (AS16509) infrastructure in the US. The SSL certificate is issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2. Security vendor detection shows 18 out of 95 engines on VirusTotal flag the domain as malicious, while Google Safe Browsing explicitly classifies it as phishing. The domain appears on one security blocklist and is currently blocked by PhishDestroy. Despite displaying a 404 Not Found page, historical data confirms active phishing operations prior to takedown. Mitigation requires immediate blocking of the domain and its associated IP (13.248.243.5) across network security controls. Organizations should implement email filtering rules to quarantine messages containing this domain or its subcomponents. End users should be trained to recognize phishing indicators, particularly domains mimicking legitimate services with slight misspellings. Security teams are advised to monitor for credential reuse attempts from harvested accounts and reset any potentially compromised credentials. Network logs should be reviewed for connections to 13.248.243.5 or related infrastructure to identify infected systems requiring remediation.