usa-holdapplo-ginxi[.]godaddysites[.]com

The domain usa-holdapplo-ginxi.godaddysites.com is currently active and classified as high‑risk credential phishing targeting the GoDaddy brand. It was registered on November 18, 2013 through GoDaddy.com, LLC and resolves to IP address 76.223.105.230, which is geolocated in the United States and belongs to AS16509 Amazon.com, Inc. The authoritative nameservers are cns1.secureserver.net and cns2.secureserver.net, both typical of GoDaddy hosting. The site presents the page title "Ûphold | Login to my Account" and serves an HTTPS certificate issued to GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2, indicating the certificate was likely obtained from the legitimate certificate provider. Technical fingerprinting reveals the use of GoDaddy Website Builder, RequireJS, Cloudflare, Re:amaze, HSTS, and cdnjs libraries, suggesting a standard web‑builder stack. VirusTotal reports 18 of 95 security vendors flagging the domain, and the domain appears on two public blocklists (PhishDestroy and PhishingDB). Gridinsoft assigns a trust score of 0 out of 100, reinforcing its malicious profile. No additional page content has been examined beyond the title, so further visual analysis remains pending. Defenders should block the domain at perimeter and DNS layers, monitor for related C2 activity tied to the same IP range, and educate users about unsolicited GoDaddy login prompts. Continuous re‑evaluation is advised as the infrastructure may evolve.