kocin-logiiuixnlkg-io[.]godaddysites[.]com

The domain kocin-logiiuixnlkg-io.godaddysites.com is currently registered through GoDaddy.com, LLC and is hosted on the GoDaddy Website Builder platform, as indicated by the presence of RequireJS and enforced HSTS headers. DNS resolution points to the IPv4 address 13.248.243.5, an address that resides within a public cloud range commonly associated with Amazon Web Services. The domain’s authoritative nameserver information could not be retrieved (NS_NOT_FOUND), which may hinder rapid takedown efforts.

Threat intelligence from the current assessment classifies the site as a generic phishing operation; the indicator is reinforced by its inclusion on a known security blocklist and by the fact that the anti‑malware aggregator VirusTotal reports detections from ten out of ninety‑one scanned security vendors. PhishDestroy also lists the domain as blocked, providing further confirmation of malicious intent. No additional public reputation services (Safe Browsing, OTX, etc.) were observed in the supplied data, leaving the broader ecosystem visibility limited.

Given the active status, the presence of multiple vendor detections, and the explicit blocklist entries, defensive teams should treat the domain as hostile. Recommended mitigations include adding the domain to network and endpoint deny lists, configuring web proxies to block HTTP(s) requests to the host, and monitoring DNS logs for queries to the unresolved nameserver records. Analysts should continue to collect page content, certificate details, and any observed credential harvesting behavior to enrich future profiles.