metamask-secureverify[.]com

metamask-secureverify.com is flagged as a high‑risk brand‑impersonation site targeting MetaMask users. The domain was registered on 31 December 2025 through GoDaddy.com, LLC and resolves to 13.248.243.5, an Amazon.com, Inc. address in the United States (AS16509). VirusTotal records show that 7 of 93 scanning engines flagged the domain, indicating malicious activity. The site is listed on the PhishDestroy blocklist and appears in one AlienVault OTX pulse, confirming its presence in threat‑intelligence feeds.

The SSL certificate is issued by GoDaddy Secure Certificate Authority – G2, and the HTTP response returns status 200, suggesting the site is actively serving content. Technical analysis reveals the use of GoDaddy Website Builder, RequireJS, reCAPTCHA and HTTP Strict Transport Security (HSTS). Nameservers ns03.domaincontrol.com and ns04.domaincontrol.com are typical of GoDaddy‑hosted domains. Gridinsoft assigns a trust score of 0 / 100, and the page title is identical to the domain name, providing no additional context.

The site is explicitly noted to impersonate MetaMask and is classified as a crypto‑scam. While the page’s internal content has not been examined, the combination of registrar, hosting, detection counts, blocklist entries and low trust score constitutes strong evidence of malicious intent. Defenders should block the domain at perimeter and DNS layers, add the IP address 13.248.243.5 to outbound deny lists, and monitor for any traffic to related GoDaddy‑hosted infrastructure. Continuous threat‑intel correlation with the OTX pulse and future VirusTotal scans is recommended to detect any evolution of the payload or additional indicators of compromise.