Phishing detection: metamask.godaddysites.com

MetaMask
http://metamask.godaddysites.com Access site
Screenshot
Screenshot of metamask.godaddysites.com
Investigate
Domain metamask.godaddysites.com
urlscan page.domain VirusTotal Whois
IP 76.223.105.230
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://metamask.godaddysites.com
urlscan Wayback archive.today
Cert GoDaddy TLS Intermediate CA DV - R1v1
crt.sh Censys Google CT
Phishunt analysis Beta
27 low suspicionheuristic risk score · not a probability
Why?
  • +5.3 Keyword match
  • +5.1 Site cluster
  • +4.5 Brand in title
  • +4.1 Brand in screenshot
  • +3.0 OpenPhish
  • +2.6 Brand in subdomain
  • +1.1 ASN reputation
  • +0.7 Unrecognised DNS provider
  • +0.5 Long domain
  • +0.2 Suspicious TLD
  • +0.1 External scripts
  • +0.1 Deep subdomain
17 signals fired · detector v3.0.0
AI analysis AIBeta
Crypto scam

MetaMask-branded page built on a GoDaddy website builder subdomain, likely aiming to capture wallet seed phrases or credentials. It reuses resources seen in other phishing sites and is listed by OpenPhish.

Brand in subdomainPaaS hostOpenPhish
AI-generated from stored detector signals - the AI never visited the site. · 2026-10-01 · confidence 80%
Domain & Network
Whois
Registrar GoDaddy.com, LLC
Network
IP 76.223.105.230
Country United StatesUnited States
Hosting Amazon.com, Inc.
ASN AS16509
TLS Cert GoDaddy TLS Intermediate CA DV - R1v1
External detection OpenPhish
CleanGoogle Safe Browsing · PhishTank · TweetFeed · urlscan.io
Report this phishing
PaaS platform GoDaddy Websites
abuse@godaddy.com Web form
Network / ASN Amazon.com, Inc.
abuse@amazonaws.com Web form
Registrar GoDaddy.com, LLC
abuse@godaddy.com Web form
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-10-01 13:04 UTC  ·  Last refreshed 2026-10-01 15:30 UTC