site-w6vzhq5av[.]godaddysites[.]com

This domain, site-w6vzhq5av.godaddysites.com, operates as a credential theft portal targeting users of professional email platforms. The page title 'messageriepro' suggests an attempt to impersonate legitimate business email services, tricking victims into entering login credentials. Once submitted, these credentials are harvested by threat actors for unauthorized account access, data exfiltration, or further malicious campaigns. Analysis indicates this infrastructure is flagged by 17 out of 95 security vendors on VirusTotal, confirming its malicious classification. The domain was registered through GoDaddy.com, LLC on November 18, 2013, though the subdomain appears to have been repurposed for phishing. It resolves to the IP address 13.248.243.5 and is currently blocked by at least one security blocklist. The SSL certificate, issued by GoDaddy.com, Inc., provides no legitimacy to the fraudulent content. Users who visited site-w6vzhq5av.godaddysites.com should immediately revoke any entered credentials, particularly for email or business-related accounts. Monitor associated accounts for unauthorized activity and enable multi-factor authentication where available. If financial or sensitive data was exposed, consider reporting the incident to relevant authorities. Avoid interacting with any links or prompts from this domain, as it remains a verified threat despite its current offline status.