uqholdxxogin-us[.]godaddysites[.]com

This domain, uqholdxxogin-us.godaddysites.com, is identified as a high-risk brand impersonation phishing site targeting Uphold, a cryptocurrency and digital asset platform. Analysis of the page title, Ûphold Loℊin | Sign In 💎, reveals deliberate character substitution and Unicode manipulation to mimic the legitimate Uphold login interface. The site functions as a credential harvesting portal, likely designed to capture user login credentials for subsequent unauthorized access to Uphold accounts. No direct evidence of a cryptocurrency drainer kit was observed, but the infrastructure aligns with credential-based phishing campaigns targeting financial platforms. Infrastructure analysis reveals multiple high-confidence technical indicators. The domain was registered through GoDaddy.com, LLC on February 21, 2026, an anomalous creation date suggesting potential domain spoofing or misconfiguration. It resolves to IP address 13.248.243.5, hosted on Amazon Web Services (AS16509) in the United States. The SSL certificate is issued by GoDaddy.com, Inc. under the Go Daddy Secure Certificate Authority - G2. Google Safe Browsing explicitly flags the domain as phishing, and it appears on at least one security blocklist (PhishDestroy). VirusTotal reports 22 detections out of 95 security vendors, indicating broad consensus on its malicious nature. The domain has been taken offline, reducing immediate risk to end users. However, residual threats persist, including potential reuse of the infrastructure for future campaigns or the exploitation of previously harvested credentials. Users who accessed the site should immediately reset their Uphold passwords and enable multi-factor authentication. Organizations should monitor for credential reuse across other platforms and consider implementing domain-based email filtering rules to block similar impersonation attempts. The anomalous creation date and rapid detection by security vendors suggest this was a short-lived but high-impact phishing operation.