mitamassk-looggin[.]godaddysites[.]com
“Met𝓪Mask Login | Login | Signup”
mitamassk-looggin.godaddysites.com — Contenuto non disponibile. Tipo di truffa: Credential Phishing. Riepilogo delle prove: VirusTotal 18/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, ESET, Emsisoft); Spamhaus DBL_ABUSED_PHISH; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 95/100. Registrar: GoDaddy.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
PhishDestroy has identified mitamassk-looggin.godaddysites.com as an active crypto drainer phishing campaign specifically targeting MetaMask users. This domain is currently live and poses a high risk of credential theft and cryptocurrency theft. The site impersonates the legitimate MetaMask login page, tricking users into entering their seed phrases or private keys, which are then harvested by attackers.
Technical analysis reveals that this domain resolves to IP address 13.248.243.5 and was registered through GoDaddy.com, LLC. Its SSL certificate is issued by GoDaddy Secure Certificate Authority, lending a false sense of legitimacy. The domain was created on November 18, 2013, which is unusually old for a phishing site, but it remains active. On VirusTotal, 18 out of 95 security vendors flag this domain as malicious, and it appears on at least one security blocklist. The page title reads "Met𝓪Mask Login | Login | Signup," which is a direct attempt to mimic the official MetaMask interface.
Given the high risk and active status, users should avoid visiting this domain entirely. PhishDestroy recommends that any MetaMask user who may have interacted with this site immediately revoke permissions and transfer funds to a new wallet. Organizations should block access to this domain and educate users about verifying URLs before entering sensitive information. Report the domain to GoDaddy and relevant cybersecurity authorities to expedite takedown.
Informazioni sulla sicurezza di rete
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Registration: godaddysites.com
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain godaddysites.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 6 identified
RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.
requirejs.org Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%Re:amaze is a multi-brand customer service, live chat, and help desk solution.
www.reamaze.com Confidenza al 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Confidenza al 100%Analisi di VirusTotal
Prove archiviate
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo