kodeotp[.]com

The domain kodeotp.com was registered on May 01, 2026 through Domain Science Kutatasi Szolgaltato Korlatolt Felelossegu Tarsasag and is currently active. Its creation date places it among recent registrations often associated with opportunistic phishing campaigns. The sole page title observed is "kodeotp.com", providing no additional context about the site’s purpose or targeted brand.

Infrastructure analysis shows the domain resolves to IP address 103.224.212.204, which is geolocated to Australia and attributed to Trellian Pty. Limited. The authoritative nameservers listed are 5579.ns1.abovedomains.com and 5579.ns2.abovedomains.com, both typical of bulk‑hosting services. The site presents a valid Let’s Encrypt certificate, indicating the presence of TLS encryption but offering no indication of legitimacy.

Threat intelligence indicates that kodeotp.com appears on one security blocklist and has been blocked by PhishDestroy, confirming that at least one defensive feed has classified it as malicious. The domain is referenced in a single AlienVault OTX pulse, suggesting limited but existing community awareness. Gridinsoft assigns the domain a trust score of 0 out of 100, and VirusTotal returns zero detections out of 95 scanners, reflecting a low detection footprint that is common for newly deployed phishing infrastructure.

Defenders should treat kodeotp.com as a high‑confidence phishing indicator. Immediate actions include adding the domain to outbound web filtering rules and DNS blocklists, monitoring DNS queries for the associated IP and nameservers, and instrumenting network telemetry to detect any attempted connections. Given the recent registration and low detection history, continuous re‑evaluation is advised, with periodic checks against threat feeds for any escalation in activity or additional malicious payloads linked to the domain.