metamsklogunexx[.]godaddysites[.]com

The domain metamsklogunexx.godaddysites.com was registered on February 21, 2026 through GoDaddy.com, LLC and currently resolves to IP address 76.223.105.230, an Amazon.com, Inc. host located in the United States. The site serves a page titled "MetaḞask Login | Login" and presents a valid SSL certificate issued by Go Daddy Secure Certificate Authority - G2, indicating proper TLS termination. HTTP requests return a 200 status, and the page incorporates GoDaddy Website Builder, RequireJS, HSTS, Google Analytics, and Facebook Pixel, suggesting a standard web‑hosting stack rather than a custom phishing kit. The domain is listed on one security blocklist and has been blocked by PhishDestroy. VirusTotal scans show 16 of 95 security vendors flagging the domain, while Gridinsoft assigns a trust score of 0 out of 100, reinforcing a high‑risk assessment. The documented scam type is credential phishing, targeting user login credentials. No further technical artifacts such as malware payloads or command‑and‑control infrastructure have been observed. Defenders should block DNS resolution and HTTP/HTTPS traffic to the domain, monitor for any authentication attempts involving the referenced service, and update endpoint protection signatures to include the observed indicator set. Continuous monitoring of the associated IP and related ASN is advised, as the infrastructure may be reused for additional phishing campaigns.