mett-amaski-lginvx[.]godaddysites[.]com

The domain mett-amaski-lginvx.godaddysites.com was registered on November 18, 2013 through GoDaddy.com, LLC and is served by the nameservers cns1.secureserver.net and cns2.secureserver.net. The site is currently offline, returning an HTTP 404 status with the page title "404 Not Found". SSL analysis shows the certificate is issued by Go Daddy Secure Certificate Authority - G2 and bears the GoDaddy.com, Inc. issuer, indicating a default certificate from the registrar. DNS resolution points to the address 13.248.243.5, an Amazon.com, Inc. host (AS16509) located in the United States.

VirusTotal has recorded 11 detections out of 95 security vendors, confirming that multiple scanners consider the domain malicious. The domain appears on a single security blocklist and is explicitly blocked by PhishDestroy. These indicators collectively support the classification of the domain as a generic phishing infrastructure. Because the site no longer serves content, the exact phishing payload or targeted brand cannot be confirmed, and the page title provides no further insight into the intended victim workflow.

Defenders should continue to block the host IP 13.248.243.5, enforce DNS filtering for the domain, and add the domain to internal blocklists. Monitoring of any future re‑registration attempts or changes to the DNS records is advised, as the long‑standing registration date suggests a possible dormant asset that could be revived. The elevated risk rating reflects the multi‑vendor detections, the presence on a phishing‑focused blocklist, and the association with Amazon cloud hosting, which is frequently leveraged by threat actors to hide malicious traffic.