site-crmvt3lbp[.]godaddysites[.]com

This domain, site-crmvt3lbp.godaddysites.com, is flagged as a generic phishing site with elevated risk, currently offline as of July 23, 2026. Infrastructure analysis reveals it was hosted on Amazon.com, Inc. infrastructure (AS16509) with an IP address of 76.223.105.230, located in the United States. The domain was registered through GoDaddy.com, LLC on November 18, 2013, and uses GoDaddy nameservers (cns1.secureserver.net, cns2.secureserver.net). The SSL certificate is issued by Go Daddy Secure Certificate Authority - G2, a common certificate provider for both legitimate and malicious sites. At the time of assessment, the domain returned an HTTP 404 status, indicating the page is no longer accessible, though this does not confirm permanent takedown.

Detection data shows the domain was flagged by 15 of 95 security vendors on VirusTotal, though the specific detection categories (e.g., phishing, malware) are not detailed. It appears on at least one security blocklist, and PhishDestroy has previously blocked access to it. The page title, 'hiedfrgh,' provides no clear indication of the targeted brand or scam type, and no further content analysis is available. The lack of a recognizable brand or kit in the provided data suggests this may be a generic phishing attempt, though the exact nature of the threat remains uncertain. Defenders should treat this domain as compromised infrastructure.

While it is currently offline, historical DNS records and SSL certificates should be reviewed for potential reuse or re-registration. Network-level blocking of the resolved IP (76.223.105.230) and monitoring of related subdomains under godaddysites.com may mitigate residual risk. If this domain was previously linked to credential harvesting or other malicious activity, affected users should be notified to reset credentials and enable multi-factor authentication where applicable.