kucoindlugeff-io[.]godaddysites[.]com

Analysis of kucoindlugeff-io.godaddysites.com indicates that the domain is actively being used for a generic phishing campaign as of July 25, 2026. The domain resolves to the IPv4 address 13.248.243.5, and the hosting provider is identified as GoDaddy.com, LLC, the registrar recorded in the WHOIS data. Name‑server information is unavailable (NS_NOT_FOUND), which limits passive DNS correlation but does not impede direct IP‑based blocking. The domain appears on one security blocklist and has been explicitly blocked by the PhishDestroy remediation service, confirming that at least one reputable feed has classified it as malicious.

VirusTotal analysis shows that 15 of 91 scanning engines return a detection for the domain, providing independent corroboration of its malicious intent. No additional telemetry such as Safe Browsing, OTX, SSL certificate details, or page title is available, leaving the broader campaign context uncertain. Given the high risk rating and active status, defenders should immediately add the fully qualified domain name and its resolved IP address (13.248.243.5) to deny‑list rules on firewalls, web proxies, DNS filtering solutions, and endpoint protection platforms.

Continuous monitoring of DNS queries for the exact hostname is advised to detect any internal resolution attempts, and any observed traffic should be logged and investigated. Because the registrar is GoDaddy.com, LLC, incident responders may consider contacting the registrar for takedown assistance to accelerate remediation. Ongoing re‑evaluation is recommended as the lack of name‑server data may allow rapid re‑hosting or migration to new sub‑domains, potentially extending the campaign’s lifespan.