usaphold-loguin-io[.]godaddysites[.]com

The domain usaphold-loguin-io.godaddysites.com is a brand impersonation phishing site specifically targeting Uphold, a cryptocurrency exchange and wallet service. The page title, "Ûphold Loℊin | Sign In 💎," is designed to deceive users into believing they are accessing the legitimate Uphold login portal. No specific drainer kit has been identified, but the site's sole purpose appears to be harvesting login credentials and potentially two-factor authentication codes. This threat is categorized as elevated risk due to the direct impersonation of a financial service and the domain's presence on security blocklists.

Technical indicators reveal that the domain resolves to IP address 13.248.243.5 and was created on November 18, 2013, through registrar GoDaddy.com, LLC. VirusTotal analysis shows that 18 out of 95 security vendors flag this domain as malicious. The SSL certificate is issued by GoDaddy Secure Certificate Authority - G2, which adds a layer of false legitimacy. The domain appears on 2 security blocklists, and Google Safe Browsing (GSB) status is not explicitly provided but is likely flagged given the vendor detections. The combination of a long-standing domain registration and a recently active phishing page suggests the attackers may have repurposed an older domain for this campaign.

The current status of the site is offline, indicating that it has been taken down, likely due to reporting or automated detection. However, the risk remains that similar domains may appear under different subdomains or variations. Users who may have visited the site before takedown should immediately change their Uphold passwords and enable two-factor authentication if not already active. Monitoring account activity for unauthorized access is also recommended. PhishDestroy advises users to always verify URLs by typing them directly into the browser and to avoid clicking links from unsolicited emails or messages. Reporting any suspicious domains to security teams or anti-phishing organizations helps mitigate future threats.