orange96[.]godaddysites[.]com

orange96.godaddysites.com is currently classified as a generic phishing site with a high risk rating. The domain was created on March 03, 2026 and remains active as of the report date, July 12, 2026. VirusTotal analysis shows that 12 out of 95 security vendors have flagged the domain, indicating a measurable level of malicious consensus. Infrastructure analysis reveals that the domain resolves to the IPv4 address 13.248.243.5, which is owned by Amazon.com, Inc. (AS16509) and geolocated to the United States. The authoritative name servers are cns1.secureserver.net and cns2.secureserver.net, both operated by the registrar GoDaddy.com, LLC. TLS is provided by a Go Daddy Secure Certificate Authority – G2 certificate, confirming the use of a legitimate SSL chain. The web front‑end returns HTTP status 200 and is built with GoDaddy Website Builder, RequireJS, and HSTS headers. A Gridinsoft trust score of 0 / 100 classifies the site as completely untrusted, and the domain appears on a single security blocklist, where it is already blocked by PhishDestroy. No additional payloads or credential‑harvesting forms have been publicly disclosed, leaving the exact phishing lure and target audience uncertain. Defenders should immediately block traffic to orange96.godaddysites.com and its resolving address 13.248.243.5 at network perimeters and endpoint filters. Continuous monitoring of the associated IP range and the GoDaddy name servers is advised, as the infrastructure may be reused for future campaigns. Incident response teams should also inspect any user‑submitted credentials that match the domain’s landing page to assess potential compromise.