site-789d7j2i9[.]godaddysites[.]com

This domain, site-789d7j2i9.godaddysites.com, is flagged for brand impersonation, specifically targeting BT. Phishing campaigns that impersonate well-known brands are designed to trick users into divulging sensitive information, such as login credentials, financial details, or personal data. The intent is often to gain unauthorized access to user accounts or to commit financial fraud.

Analysis indicates that 18 out of 95 security vendors on VirusTotal have flagged this domain as malicious, suggesting a significant level of suspicion and potential risk. The domain was registered through GoDaddy.com, LLC on February 21, 2026, and it appears on one known security blocklist. The SSL certificate for the domain is issued by GoDaddy.com, Inc. / Go Daddy Secure Certificate Authority - G2. The domain resolves to the IP address 13.248.243.5, which is located in the United States and is part of the AS16509 Amazon.com, Inc. network. As of the latest assessment, the domain is currently offline, which may indicate that the threat has been mitigated or the domain has been taken down.

If users have visited site-789d7j2i9.godaddysites.com, they should immediately review their accounts for any unauthorized activity, particularly those associated with BT. It is recommended to change passwords for any accounts that may have been compromised and to enable two-factor authentication if available. Users should also report any suspicious activity to their respective service providers and consider running a comprehensive security scan on their devices to ensure there are no lingering threats.