kraqienloghii[.]godaddysites[.]com

On 23 July 2026 analysts reviewed the domain kraqienloghii.godaddysites.com, which is classified as a generic phishing site. The domain is registered through GoDaddy.com, LLC and was created on 18 November 2013. DNS resolution points to the IPv4 address 13.248.243.5, which belongs to Amazon.com, Inc. (AS16509) and is geolocated in the United States. The authoritative nameservers are cns1.secureserver.net and cns2.secureserver.net, both operated by GoDaddy’s hosting platform.

An SSL certificate issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority – G2 is present, indicating that HTTPS connections are supported despite the site returning an HTTP 404 status code at the time of analysis. The page title retrieved from the site reads “Kr𝖆ken Loℊin | Loℊ In”. The domain appears on a single public blocklist, PhishDestroy, and VirusTotal records show that 16 of 93 scanned security vendors flagged the domain as malicious. No additional public intelligence, such as Safe Browsing or OTX entries, is currently available.

The combination of a longstanding registration, active SSL certificate, and recent blocklist detection suggests that the domain was recently employed in phishing campaigns before being taken offline. Because the site is no longer reachable, immediate traffic blocking is advisable, and defenders should continue to monitor the associated IP address and nameserver pair for potential reuse. Organizations using web filtering should ensure that the domain and its IP are added to deny lists, and threat‑intel teams may consider correlating any observed login credential submissions with the 16 vendors that reported detections to refine attribution. Further investigation is required to determine the specific payload or credential‑harvesting mechanism that was hosted, as the current HTTP 404 response provides no content for deeper analysis.