upho-ldlogx1[.]godaddysites[.]com

This domain, upho-ldlogx1.godaddysites.com, was identified as a phishing site targeting users of a major web services provider. The site impersonates the provider’s login portal, presenting a fraudulent page titled 'Ûphold | Login | Sign In' to deceive visitors into entering sensitive credentials. Such attacks typically aim to harvest usernames, passwords, and other authentication details for unauthorized access or financial fraud. Analysis indicates the domain was registered through a widely used registrar on November 18, 2013, though its malicious use appears recent. It resolves to an IP address (76.223.105.230) hosted on infrastructure belonging to a large cloud provider, a common tactic to blend with legitimate traffic. Security vendors flagged the domain in VirusTotal scans, with 15 out of 95 engines detecting it as malicious. The site also appears on two security blocklists, further confirming its classification as a phishing threat. If you visited this domain or entered credentials on its login page, immediate action is required. Disconnect the device from the network to prevent potential follow-up attacks. Reset passwords for any accounts accessed from the compromised device, prioritizing email, financial, and administrative accounts. Enable multi-factor authentication where available to add an additional security layer. Monitor accounts for unauthorized activity and report the incident to your organization’s security team or a trusted cybersecurity professional for further guidance.