uphoald-logginus[.]godaddysites[.]com

The domain uphoald-logginus.godaddysites.com is currently flagged as a high‑risk credential phishing site. The site presents a page titled “Uphold | Login”, mimicking the legitimate Uphold service to harvest user credentials. Classification is confirmed as generic_phishing with an active status as of the report date, July 12 2026. Infrastructure analysis shows the domain was registered on February 21 2026 through GoDaddy.com, LLC. DNS resolution points to the IPv4 address 76.223.105.230, which belongs to AS16509 operated by Amazon.com, Inc., located in the United States. The site serves over HTTPS with a GoDaddy Secure Certificate Authority – G2 certificate and enforces HSTS. The underlying technology stack includes GoDaddy Website Builder and RequireJS. Detection metrics reinforce the malicious assessment. VirusTotal records 16 detections out of 95 scanned security vendors. The domain appears on one external blocklist and is actively blocked by PhishDestroy. HTTP response code 200 confirms the page is reachable. Gridinsoft assigns a trust score of 0 / 100, indicating no benign reputation. Uncertainty remains regarding the full scope of the phishing campaign. While the page title and visual cues suggest a targeted impersonation of Uphold, the specific phishing kit or credential exfiltration endpoint has not been disclosed. No additional domains or sub‑domains have been publicly linked, and future hosting changes cannot be excluded. Defenders should immediately add uphoald-logginus.godaddysites.com to URL filtering and network block lists. Monitoring of outbound traffic to the resolved IP address 76.223.105.230 is advised, as is the inspection of TLS handshakes for the GoDaddy certificate fingerprint. User awareness training that highlights the deceptive “Uphold | Login” page can reduce credential submission risk. Continuous re‑evaluation of the domain’s status on blocklists is recommended.