ssomyuphhodcdnapps[.]wixstudio[.]com

This domain, ssomyuphhodcdnapps.wixstudio.com, is flagged as a generic phishing site targeting users of the Uphold digital money platform. Analysis of the page title, LogIn® | Uphold®, indicates an attempt to deceive victims into entering legitimate credentials on a fraudulent interface. The domain does not appear to employ a known cryptocurrency drainer kit but focuses on credential harvesting, likely for subsequent unauthorized account access or financial fraud. No associated malware payloads have been identified in available telemetry. Infrastructure analysis reveals the domain was registered through a large commercial registrar and currently resolves to the IP address 34.144.206.118, hosted on a cloud provider’s infrastructure. VirusTotal detection metrics show 3 out of 95 security vendors flagging the domain as malicious, while it appears on three distinct security blocklists. The SSL certificate is issued by Let’s Encrypt, a common choice for both legitimate and malicious sites due to its accessibility. Technologies detected include Wix as the hosting platform, React for frontend development, and Google Cloud CDN for content delivery, suggesting the use of modern, scalable web infrastructure to evade detection. The domain has been taken offline, reducing immediate risk to end users. However, the infrastructure remains potentially reusable for future phishing campaigns. Organizations should ensure the domain and its resolving IP are blocked at the network level. Users who may have interacted with the site should be advised to reset credentials for any accounts entered, particularly those associated with Uphold or other financial services. Continuous monitoring for similar domains using the same registrar, hosting provider, or SSL certificate authority is recommended to detect potential follow-up activity.