o-o[.]godaddysites[.]com

This domain, o-o.godaddysites.com, is identified as a confirmed phishing portal targeting users of the Uphold cryptocurrency platform. Analysis of the page title, "Ûphold Login | Sign In," indicates an attempt to spoof the legitimate Uphold login interface, likely to harvest user credentials. The domain does not appear to be associated with a known phishing kit based on current indicators, but the spoofed branding and active status suggest a targeted credential theft operation. Infrastructure analysis reveals the following technical indicators: The domain is flagged by 16 out of 95 security vendors on VirusTotal, indicating moderate detection coverage. It is registered through a large commercial registrar and resolves to the IP address 13.248.243.5. The domain was created on November 18, 2013, though the phishing content appears to have been deployed recently. Google Safe Browsing (GSB) status is not explicitly provided, but the domain is present on multiple blocklists, reinforcing its malicious classification. As of the latest verification, o-o.godaddysites.com remains active and continues to host the phishing page. No takedown actions have been observed, and the SSL certificate issued by the registrar remains valid. The remaining risk is assessed as high due to the domain's active status, targeted branding, and low-to-moderate detection rates. Users are advised to avoid interacting with this domain, and organizations should consider implementing network-level blocks for 13.248.243.5 and monitoring for credential reuse attempts from affected accounts.