lobstrs-logins[.]godaddysites[.]com

This domain, lobstrs-logins.godaddysites.com, operates as a credential theft infrastructure designed to impersonate the Lobstr cryptocurrency wallet service. Analysis indicates the page title, 'Lobstr Login | Login TO Your Account - Lobstrs-logins,' directly mimics the legitimate Lobstr authentication portal, suggesting an intent to harvest user credentials through brand deception. No explicit drainer kit signatures were observed, though the domain structure and hosting pattern align with known credential phishing campaigns targeting cryptocurrency platforms. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on June 15, 2026, and resolves to the IP address 13.248.243.5. The SSL certificate is issued by GoDaddy.com, Inc., a common registrar for both legitimate and malicious domains. Detection metrics show the domain is flagged by 4 out of 95 security vendors on VirusTotal, with active listings on three security blocklists. The domain is further blocked by MetaMask, PhishDestroy, and SEAL, indicating cross-industry recognition of its malicious intent. No Google Safe Browsing (GSB) entries were identified at the time of analysis. The domain has since been taken offline, likely due to registrar intervention or hosting provider action. While the immediate threat is mitigated, residual risk remains for users who may have interacted with the domain prior to its removal. Organizations are advised to monitor for credential reuse attempts and implement multi-factor authentication (MFA) to mitigate account compromise risks. Network defenders should update blocklists with the observed indicators, including the IP 13.248.243.5 and the domain itself, to prevent future access attempts.