zaduix[.]com

Analysis of the domain zaduix.com confirms its classification as a phishing infrastructure targeting GoDaddy users, with evidence supporting its role in social media phishing campaigns. Registered on July 29, 2024, through GoDaddy.com, LLC, the domain resolved to IP address 76.223.67.189, hosted on Amazon Web Services (AS16509) in the United States. Nameservers ns23.domaincontrol.com and ns24.domaincontrol.com further link the domain to GoDaddy's infrastructure, though no SSL certificate was detected, increasing its risk profile for credential interception. Detection data indicates elevated malicious activity: the domain appears on one security blocklist (PhishDestroy) and is flagged by 4 of 95 security vendors in VirusTotal scans.

AlienVault OTX records the domain in a single threat intelligence pulse, corroborating its use in active phishing operations. Gridinsoft assigns a trust score of 0/100, reflecting high confidence in its malicious classification. The domain's current offline status suggests takedown action, though defenders should monitor for re-activation or migration to new infrastructure. Infrastructure analysis reveals no legitimate use case for zaduix.com.

The absence of an SSL certificate, combined with its brief operational window (less than two years from registration to takedown), aligns with patterns observed in short-lived phishing domains. While the exact content of the site remains unanalyzed, the provided scam type (social media phishing) and brand target (GoDaddy) confirm its intent to deceive users into divulging credentials or sensitive information. Network defenders are advised to block the domain and IP at perimeter controls, and to review logs for prior connections from internal assets. Given the domain's registration through GoDaddy, organizations may also investigate potential abuse of registrar services for future phishing domain registrations.