iuophidldlognhus[.]godaddysites[.]com

The domain iuophidldlognhus.godaddysites.com has been identified as a phishing site specifically targeting users of the Uphold digital asset platform. Analysis of the page title, 'Ûphold Loℊin | Sign In 💎', confirms the domain was designed to harvest login credentials through a fraudulent Uphold sign-in interface. The site is currently offline, but prior activity indicates a high-risk credential theft operation. Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on February 21, 2026, an unusually future-dated creation likely intended to evade detection. The site resolved to IP address 76.223.105.230, hosted on Amazon.com, Inc. infrastructure (AS16509). Security vendor assessments show 18 of 95 engines on VirusTotal flagged the domain as malicious, while Google Safe Browsing and PhishDestroy both classified it as phishing. The domain appears on one security blocklist, and its SSL certificate was issued by Go Daddy Secure Certificate Authority - G2, a legitimate but frequently abused certificate provider. Current status indicates the domain has been taken offline, though the infrastructure remains a potential vector for future attacks. Organizations are advised to add the domain and associated IP (76.223.105.230) to network blocklists, particularly for financial services and cryptocurrency-related traffic. Users who may have interacted with the site should reset Uphold credentials immediately and enable multi-factor authentication. Security teams should monitor for similar domains using the 'godaddysites.com' subdomain structure, especially those impersonating financial platforms with Unicode character spoofing in page titles.