beta[.]upholdf[.]com

Analysis of beta.upholdf.com shows a newly registered domain (created 06 July 2025) that is actively serving content. The domain is registered through Dynadot LLC and resolves to the IPv4 address 34.111.26.73, which belongs to AS396982, Google LLC, and is geolocated in the United States. The authoritative name servers are ns1.adtraks.com and ns2.adtraks.com. An HTTPS connection is presented using a Let’s Encrypt certificate issued under the YR2 automation profile, and the web server returns HTTP status code 200 with the page title “Redirecting..”.

The site has been added to one security blocklist and is specifically blocked by the PhishDestroy service. Independent scanning on VirusTotal records six positive detections out of ninety‑three participating security vendors, indicating that multiple anti‑malware engines have flagged the domain as malicious. Additional reputation data shows a Gridinsoft trust score of 0 out of 100, confirming an extremely low confidence in safety. The threat classification provided is “Crypto Gambling”, suggesting that the domain is being used to lure victims into fraudulent cryptocurrency gambling schemes.

Current intelligence does not reveal the exact payload or phishing kit employed, and the content beyond the redirect title has not been publicly disclosed. Defenders should consider the domain as high‑risk: block network traffic to 34.111.26.73, add beta.upholdf.com to local deny lists, monitor for DNS queries to the associated name servers, and enforce URL filtering that includes the known blocklist entry. Continuous re‑assessment is advised, as detection counts may increase if additional security vendors observe malicious activity.