up-hold-us[.]daftpage[.]com

The domain up-hold-us.daftpage.com was identified as an Ethereum brand impersonation specifically designed as a crypto drainer to steal login credentials and cryptocurrency assets. The site is currently offline, but its infrastructure remains a threat if reactivated. This domain impersonated the legitimate Uphold platform, using the page title 'Uphold Login | Secure Access to Your Uphold Account' to trick users into entering sensitive information.

Technical analysis reveals that the domain was created on October 24, 2021, and registered through OVH, SAS. It resolves to IP address 216.150.1.193 and uses an SSL certificate issued by Let's Encrypt (R13), which is common among fraudulent sites. VirusTotal flags this domain with 17 out of 95 security vendors marking it as malicious, and it appears on two security blocklists. Google Safe Browsing also flags it for phishing. The domain's trust score is critically low due to these indicators.

Given the high-risk nature of this Ethereum brand impersonation crypto drainer, users should never visit or interact with up-hold-us.daftpage.com. The domain is offline but could be reactivated under the same or similar names. To stay safe, always verify URLs by typing them directly into the browser, enable two-factor authentication on all crypto accounts, and report any suspicious domains to security authorities. PhishDestroy recommends monitoring for variants and using blocklists to prevent future access.