Skip to security report
⚠️
This domain has been flagged as malicious
Security engines reporting a detection: 19. Exercise extreme caution — do not enter credentials or personal information.
Domain security and threat intelligence

site-8of5kk5za[.]godaddysites[.]com

“404 Not Found”

Threat verdict Critical 95/100 evidence score
Availability Content unavailable Content was unavailable in the latest observation
VirusTotal detections: 19/93
Feb 26, 2026
Evidence Summary
CRITICAL
Ref
2FDCC39B
Score
95/100

This domain is flagged as a high-risk crypto drainer phishing threat, designed to extract wallet credentials and siphon cryptocurrency assets from victims. Infrastructure analysis indicates the site employs deceptive tactics to mimic legitimate wallet interfaces, tricking users into exposing private keys or signing malicious transactions. The domain poses an immediate financial risk to individuals interacting with blockchain-based services. Analysis reveals the domain site-8of5kk5za.godaddysites.com was registered through GoDaddy.com, LLC on February 21, 2026, an anomalous future date suggesting potential domain spoofing or registry manipulation. It resolves to IP address 13.248.243.5, hosted within Amazon.com, Inc. (AS16509) infrastructure in the United States. The SSL certificate is issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2, a common vector for phishing sites leveraging trusted certificate authorities. VirusTotal detection rates show 19 out of 95 security vendors flagging the domain as malicious. The domain appears on three security blocklists and is actively blocked by multiple threat intelligence feeds, including those specializing in cryptocurrency fraud prevention. Mitigation requires immediate action from both end-users and security teams. Individuals should verify wallet addresses and transaction details independently before signing any blockchain interactions. Browser-based wallet extensions or security tools that detect malicious transaction requests should be employed to intercept unauthorized asset transfers. Organizations managing cryptocurrency infrastructure should update web filtering rules to block the domain and its resolving IP address. Security teams are advised to monitor for indicators of compromise, including the domain name, IP address, and SSL certificate issuer, within network traffic and endpoint logs. Proactive hunting for similar domains registered through the same registrar or resolving to the same IP range may uncover additional threats in this campaign.

VirusTotal
VirusTotal
19 det.
URLScan
URLScan
TLS Certificate
Expired or unverified -14d
Age
6 mo
Observed status
Content unavailable
PhishDestroy
DestroyList
Listed
Data coverage VirusTotal 19 / 93 URLQuery not checked PhishStats checked — no match recorded OTX no community references CF Radar scan completed URLScan capture stored report URLScan verdict Analysis completed DNS blocks not checked TLS Expired or unverified WHOIS 6 mo old Screenshot 2 captures · 2 sources Redirect chain not probed

Threat Response Pipeline

Discovery
Checks
Reports
Availability
14/15

Public Blocklist Status

Stored Capture

Page Title
404 Not Found
TLS Certificate
Expired or unverified · Issued by GoDaddy.com, Inc. / Go Daddy Secure Certificate Authority - G2

Domain Intelligence

Domain
URLScan Verdict Analysis completed score 0 report ↗
Server / ASN DPS/2.0.0-beta+sha-319d25b · AS16509 AMAZON-02 - Amazon.com, Inc., US
IP Reputation abuse score 15/100 8 reports checked Jun 15, 2026
Registrar (base domain) GoDaddy US(US)
IP Address 13.248.243.5 US
GeoUS Seattle, US
NetworkAS16509 · Amazon.com, Inc.
Registration (base domain)godaddysites.com · Created Feb 21, 2026 (178d)
Time to First Unavailability 132 days
What we count Elapsed time from the first stored abuse report to the first observation that the content was unavailable. This does not establish the cause.
What each report contains Stored outgoing-report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Technical detailsDNS, SSL SANs, timestamps
First DetectedFeb 26, 2026
DOM Analysisanalyzed Jul 29, 2026score 0/100
IoC Extractionscanned Aug 2, 20260 wallet · 0 Telegram IoCs
TLS Fingerprint
TLS Observationvalid from Jul 3, 2025scanned Mar 15, 2026
TLS SAN Domainsgodaddysites.com
ICANN OVERSIGHT Registration: godaddysites.com

Accreditation and RAA context

Registrar accreditation and DNS abuse obligations

For the registrable domain godaddysites.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.

Accreditation is a contract, not a safety certification.

RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.

Accountability draft Nothing is sent automatically.
Report This Domain Submit evidence & help protect others

VirusTotal Analysis

19 / 93 security vendors flagged this domain
View on VT
Last analyzed
ADMINUSLabs
ChainPatrol
alphaMountain.ai
BitDefender
CRDF
CyRadar
Ermes
ESET
Forcepoint ThreatSeeker
G-Data
Gridinsoft
Kaspersky
Lionic
Sophos
Trustwave
URLQuery
VIPRE
Webroot
Yandex Safebrowsing
Site Performance Analysis

Google PageSpeed Insights — mobile performance audit of site-8of5kk5za.godaddysites.com · checked Mar 2, 2026

100
Good
Performance
FCP
1.1s
First Contentful Paint
LCP
1.1s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
0ms
Total Blocking Time
SI
1.1s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor

Evidence & External Reports

Were You Affected by This Site?

If credentials were compromised, report immediately. Do not engage with recovery scammers.

If credentials, payment data, or files were exposed, report the incident immediately. Change affected passwords, revoke active sessions, and scan the device.

Europol
Find the official reporting channel for your EU country
National police directory
Beware of recovery scammers! Recovery scammers may pose as investigators, lawyers, or tracing services. Do not pay upfront fees or disclose credentials. Learn more about recovery fraud →

Report to Your Local Authorities

Select your country to get official cybercrime contacts, or create a complaint draft →.

97-country directory
Template-based draft • optional AI wording assistance requires separate consent Review and submit it yourself

Check Any Domain

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Scan Now

Report Phishing

Submit suspicious domains to our threat database — protect the community

Report

Live Threat Feed

Recent phishing reports and observed availability changes

Monitor

Stay Informed, Stay Safe

Monitor live threats or contest this listing if you believe it's a false positive

Live Threat Feed Appeal This Listing
HTML · IFRAME

Embed This Report

Share this threat intelligence on your website or blog

embed.html
<iframe
  src="https://phishdestroy.io/embed/domain/site-8of5kk5za.godaddysites.com"
  title="PhishDestroy threat report for site-8of5kk5za.godaddysites.com"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>

A Very Sincere Thank-You Note

Satirical draft generator

Recipient
Fee context

Satirical draft. Fee figures are estimates; exact attribution to this domain is not claimed.