upphold-walet[.]pages[.]dev

The domain upphold-walet.pages.dev is a generic phishing site targeting cryptocurrency users, classified as an elevated-risk scam. It does not impersonate a specific brand but presents itself as a cryptocurrency wallet service, likely to harvest login credentials or private keys. As of the latest verification, upphold-walet.pages.dev has been taken offline, though prior activity indicates it was actively used for phishing.

Technical indicators confirm the malicious nature of upphold-walet.pages.dev. The domain was flagged by 2 of 95 VirusTotal security vendors, including LevelBlue and Phishing Database, and appears on 3 security blocklists (PhishDestroy, MetaMask, and SEAL). Registered through Cloudflare, Inc. on October 31, 2025, it resolves to the IP address 172.66.44.164, hosted by Cloudflare in California. The SSL certificate is issued by Google Trust Services (WE1), and the observed page title was 'Uphold Wallet: Features, Benefits, and How It Works (2025 Guide)'. The domain employs HSTS, Cloudflare, and HTTP/3 technologies, and currently returns an HTTP 403 status.

Users who interacted with upphold-walet.pages.dev should immediately revoke any token approvals and transfer funds to a new wallet to prevent unauthorized access. If login credentials were entered, change passwords for all associated accounts and enable two-factor authentication. Report the phishing domain to platforms such as Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group to aid in takedown efforts. Monitor accounts for suspicious activity and consider using a hardware wallet for enhanced security.