upholyducloggin[.]godaddysites[.]com

This domain is flagged as a credential harvesting phishing site targeting Uphold users. Analysis indicates an elevated risk level due to its specific focus on stealing login credentials through a fraudulent Uphold login interface, as evidenced by the page title 'Ûphold Login | Sign In.' Infrastructure analysis reveals the domain was registered through GoDaddy.com, LLC on February 21, 2026, and resolves to IP 13.248.243.5 (US, AS16509). The SSL certificate is issued by GoDaddy.com, Inc. / Go Daddy Secure Certificate Authority - G2. Detection metrics show 19 out of 95 security vendors on VirusTotal flagging the domain as malicious. It appears on two security blocklists and is currently blocked by PhishDestroy and PhishingDB. The domain has since been taken offline. Mitigation steps for this threat type include implementing domain-based email filtering to block messages containing this domain or similar patterns. Network-level protections should be updated to deny traffic to the resolved IP (13.248.243.5) and any associated subdomains. End-user training should emphasize verifying domain authenticity before entering credentials, particularly for financial platforms. Security teams are advised to monitor for credential reuse attempts from harvested accounts and enforce multi-factor authentication where possible.