my-upheld[.]created[.]app

Analysis of the domain my-upheld.created.app shows it is actively serving content (HTTP 200) and is hosted on infrastructure owned by Vercel, Inc., resolving to IP 216.150.1.1 in the United States. The site presents a generic page title "Homepage" and uses a Let's Encrypt certificate (R13). Reputation data is poor: Gridinsoft assigns a trust score of 0/100, and Google Safe Browsing flags the domain for social engineering. VirusTotal records three detections out of ninety‑one scanners, and the domain appears on three independent security blocklists. Registration details indicate a recent creation date of May 21, 2026 through Tucows Domains Inc, with authoritative nameservers ns1.vercel-dns.com and ns2.vercel-dns.com. While the exact malicious payload or credential‑harvesting mechanisms have not been publicly disclosed, the combination of a low trust score, Safe Browsing warning, multiple detections, and blocklist listings provides strong evidence of a phishing operation. Defenders should block the domain at network and endpoint layers, monitor DNS queries for the associated IP and nameservers, and add the domain to internal threat intelligence feeds. Ongoing observation is advised to capture any future changes to the hosted content or additional indicators of compromise.