site-96p3yce5g[.]godaddysites[.]com

This domain, site-96p3yce5g.godaddysites.com, is flagged as a brand impersonation threat targeting GoDaddy users. Analysis indicates the site presents a French-language login page titled 'Identifiez-vous,' designed to harvest credentials by mimicking the legitimate GoDaddy authentication interface. No drainer kit signatures have been identified, but the page structure and language suggest a focused phishing campaign aimed at French-speaking users. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on November 18, 2013, and currently resolves to IP address 76.223.105.230, hosted on Amazon.com, Inc. infrastructure (AS16509). VirusTotal detection metrics show 18 out of 95 security vendors flagging the domain as malicious. The domain appears on two security blocklists, including PhishDestroy and PhishingDB, and is associated with a GoDaddy-issued SSL certificate, which may have been exploited to lend false legitimacy to the phishing portal. As of the latest assessment, the domain has been taken offline, likely in response to abuse reports or automated takedown mechanisms. However, the elevated risk level persists due to the domain's historical use in credential phishing and its potential for reactivation. Users who may have interacted with the site are advised to reset their credentials immediately and monitor for unauthorized account activity. Organizations should update their blocklists to include this domain and its associated IP to prevent future access attempts.