qoonbass-proz-logz[.]godaddysites[.]com

This domain qoonbass-proz-logz.godaddysites.com was created on November 18, 2013 through GoDaddy.com, LLC and currently resolves to IP address 13.248.243.5 in the United States under AS16509. The nameservers in use are cns1.secureserver.net and cns2.secureserver.net while the active SSL certificate was issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2. HTTP status returns 200 and the listed page title is Çoinbase Pro Login | Sign In. Infrastructure analysis reveals use of GoDaddy Website Builder along with RequireJS, Re:amaze and HSTS. The domain is recorded as impersonating godaddy under a brand_impersonation classification with a recorded scam type of Credential Phishing.

Detection data shows the domain flagged by 18 out of 95 vendors on VirusTotal, listed on exactly two blocklists named PhishDestroy and PhishingDB, and assigned a Gridinsoft trust score of 0 out of 100. The risk level is marked high and the status remains active as of the July 12, 2026 report date. These indicators are drawn directly from the supplied telemetry without reliance on site content that has not been examined.

What remains uncertain is the precise sequence of redirects, any additional sub-resources loaded after the initial request, and whether the observed configuration has changed since the last scan. No direct observation of page elements or user interaction flows is available from the provided intelligence.

Defenders should add the domain and its current IP 13.248.243.5 to internal block lists, monitor the associated nameservers for further hostnames, and cross-reference new resolutions against the two known blocklists. Continued tracking of the VirusTotal score and Gridinsoft rating is recommended to detect any sudden expansion of detections.