site-v8lmiueis[.]godaddysites[.]com

This domain, site-v8lmiueis.godaddysites.com, is identified as a brand impersonation phishing site targeting BT. The domain is currently offline but was actively used to mimic BT’s official branding, including the page title "BT," to deceive users into disclosing sensitive information. Analysis indicates this was a deliberate attempt to exploit trust in the BT brand for fraudulent purposes. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on February 21, 2026, and resolved to the IP address 13.248.243.5, hosted on Amazon.com, Inc. infrastructure (AS16509). The domain appears on one security blocklist and has been flagged by 22 of 95 security vendors on VirusTotal. The SSL certificate is issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2, which is consistent with the registrar but does not mitigate the phishing risk. The creation date and hosting provider suggest a short-lived campaign designed to evade detection. The domain is currently offline, reducing immediate risk to users. However, organizations and individuals should remain vigilant for similar impersonation attempts. Recommended actions include blocking the domain and its associated IP (13.248.243.5) at the network level, monitoring for related domains registered through the same registrar, and educating users on recognizing brand impersonation tactics. Security teams should also review logs for any prior connections to this domain or IP to assess potential exposure.