kakenllgnggi[.]godaddysites[.]com

On July 24, 2026, the domain kakenllgnggi.godaddysites.com was identified as a high‑risk, generic phishing infrastructure. Registration data shows the domain was created through GoDaddy.com, LLC, a well‑known registrar that frequently hosts legitimate as well as malicious sites. The domain resolves to the IPv4 address 13.248.243.5, a host that has been observed in other phishing campaigns and is currently reachable on the public internet. Threat intelligence platforms have flagged the domain: PhishDestroy has placed it on its blocklist, and it appears on one additional security blocklist, confirming that at least two independent sources consider the host malicious.

VirusTotal analysis reports that nine out of ninety‑one scanned security vendors have generated detections for the domain, providing further corroboration of its malicious intent. Nameserver lookup failed, indicating that DNS configuration details are either hidden or have been removed, which can be a tactic to impede attribution. The domain remains active at the time of reporting, suggesting that the phishing operation is ongoing.

Defensive recommendations include immediate blocking of kakenllgnggi.godaddysites.com at network perimeter devices, adding the associated IP address 13.248.243.5 to deny‑list rules, and monitoring for any outbound connections to this host. Organizations should also enrich their threat feeds with the observed blocklist identifiers and VirusTotal detection count to improve detection accuracy. Continuous re‑evaluation is advised, as the infrastructure may evolve or migrate to new hosting resources.