app-uphd[.]daftpage[.]com

This domain, app-uphd.daftpage.com, is identified as a high-risk phishing resource specializing in brand impersonation. Analysis confirms it mimics Uphold, a legitimate digital asset platform, by presenting a fraudulent login interface titled 'Log In | Uphold : | Sign In to Your Account.' The page is designed to harvest user credentials, likely funneling them to threat actors for unauthorized account access or financial theft. No explicit drainer kit signatures were observed, but the page structure aligns with credential-harvesting campaigns targeting cryptocurrency users. Infrastructure analysis reveals multiple technical indicators of compromise. The domain resolves to IP address 216.150.1.1 and was registered through OVH, SAS on October 24, 2021. It is flagged by Google Safe Browsing as phishing and appears on two independent security blocklists. VirusTotal detection metrics report 19 out of 95 security vendors marking the domain as malicious. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites due to its accessibility and automation. As of the latest assessment, app-uphd.daftpage.com has been taken offline, reducing immediate exposure. However, residual risk persists due to potential reuse of the infrastructure or registration of similar domains. Users who interacted with the site are advised to reset credentials on the legitimate Uphold platform and monitor accounts for unauthorized activity. Organizations should update blocklists to include this domain and its associated IP to prevent future access attempts. Continuous monitoring of newly registered domains with similar naming patterns is recommended to mitigate evolving threats.