faqenupholdauth[.]free[.]site[.]pro

This domain is flagged as a high-risk credential harvesting phishing site designed to impersonate a legitimate cryptocurrency platform. Analysis indicates the infrastructure was specifically engineered to deceive users into submitting login credentials, likely for unauthorized account access or financial theft. The page title, 'Uphold Login®™ ||Your Secure Gateway to Crypto*,' directly mimics branding associated with a known digital asset service, increasing the likelihood of successful social engineering attacks. Infrastructure analysis reveals the domain faqenupholdauth.free.site.pro resolves to the IP address 104.196.132.63 and was registered through Realtime Register B.V. on March 27, 2026. The site employs a Let's Encrypt SSL certificate, providing a false sense of security, and is served via Apache HTTP Server with HTTP/3 support. Detection metrics show the domain is flagged by 14 out of 95 security vendors on VirusTotal and appears on three distinct security blocklists. Additional trust scoring systems assign a risk rating of 0 out of 100, confirming its malicious classification. The domain has since been taken offline, though residual risk may persist for users who interacted with it prior to deactivation. Mitigation measures should focus on credential security and infrastructure hardening. Users who accessed the domain are advised to immediately reset passwords for any accounts where identical or similar credentials were entered, particularly those associated with cryptocurrency services. Organizations should implement multi-factor authentication (MFA) and monitor for unauthorized access attempts using the known indicators of compromise (IOCs), including the IP 104.196.132.63 and the domain itself. Security teams are recommended to update blocklists with the provided IOCs and conduct retrospective log analysis to identify potential exposure. Given the domain's registration date discrepancy, further investigation into the registrar's abuse handling procedures may be warranted to prevent future misuse.