# PhishDestroy domain threat record: uphold-careers.com Content language: English Canonical HTML report: https://phishdestroy.io/domain/uphold-careers.com/ Machine-readable companion: https://phishdestroy.io/domain/uphold-careers.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: unknown - First observed by PhishDestroy: 2026-10-22 02:45:52 UTC - Stored record updated: 2026-10-22 08:56:13 UTC - VirusTotal detections in the stored snapshot: 8/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: flagged ## Stored classification - Targeted brand: uphold ## Stored infrastructure - Observed IP address: 95.169.180.51 - Registrar in stored WHOIS data: Ultahost, Inc. - Registration date in stored WHOIS data: 2026-10-15 07:06:57 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a15df2-8d3d-73fe-a524-a83ae872075a/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/uphold-careers.com - Certificate Transparency search: https://crt.sh/?q=%25.uphold-careers.com - Web Archive lookup: https://web.archive.org/web/*/https://uphold-careers.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added uphold-careers.com to its blocklist after an intake check flagged it for a Google Safe Browsing social‑engineering warning. The domain was first observed by PhishDestroy on 2026-10-22, returning an HTTP 200 response. How the scam works The detections associated with the site indicate a social‑engineering risk, which generally attempts to trick users into revealing credentials or personal data by mimicking a trusted brand. No specific malicious behavior was observed on the captured page. Evidence VirusTotal recorded eight malicious detections from 92 scanning engines on 2026-10-19, including AlphaMountain.ai, CRDF, Emsisoft, Fortinet, Google Safe Browsing, Lionic, Netcraft and Webroot. Google Safe Browsing flagged the domain as SOCIAL_ENGINEERING on 2026-10-22. urlscan.io captured the site on 2026-10-21 and assigned a malicious verdict with a phishing category and an Uphold brand tag. PhishDestroy’s internal blocklist contains the domain as of 2026-10-22. External blocklists checked on that date returned no additional listings. OTX reported zero pulses on 2026-10-22. Infrastructure The domain was registered on 2026-10-15 through Ultahost, Inc., giving it a five‑day age at the time of capture. DNS records observed on 2026-10-16 listed an A record pointing to 95.169.180.51, which was identified as part of the Keyweb AG IP Network in the United States. The site presented a TLS 1.3 connection using a Let’s Encrypt certificate issued on 2026-10-15 and valid until 2027-01-13. Nameservers ns1‑ns4.ultahost.com and MX records for uphold-careers.com and mail.uphold-careers.com were recorded. What to do Do not enter any credentials or personal information on the site; if you have, change your passwords and enable two‑factor authentication. Report the incident to Uphold’s abuse channel and to your organization’s security team. Defenders should add the domain to blocklists, monitor DNS queries for it, and review logs for any connections to the recorded address. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a15df2-8d3d-73fe-a524-a83ae872075a/ Cloudflare Radar report: https://radar.cloudflare.com/scan/4f50137a-4ee8-49a7-b4aa-e9f1d87a8419 Stored capture screenshot: https://urlscan.io/screenshots/01a15df2-8d3d-73fe-a524-a83ae872075a.png VirusTotal report: https://www.virustotal.com/gui/domain/uphold-careers.com Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=uphold-careers.com Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-22 02:49:38 UTC ## Stored page captures - Primary capture: https://urlscan.io/screenshots/01a15df2-8d3d-73fe-a524-a83ae872075a.png Captured: 2026-10-22 02:45:52 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a15df2-8d3d-73fe-a524-a83ae872075a.png Captured: 2026-10-22 03:30:12 UTC Source report: https://urlscan.io/result/01a15df2-8d3d-73fe-a524-a83ae872075a/ ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-22T02:48:43Z", "uuid": "01a15df2-8d3d-73fe-a524-a83ae872075a", "scanned_at": "2026-10-21T10:12:28Z", "final_url": "https://uphold-careers.com/", "status": 200, "ip": "95.169.180.51", "domains": [ "cdn.jsdelivr.net" ], "ips": [ "2606:4700::6811:d005", "95.169.180.51" ], "asns": [ "13335", "262287" ], "countries": [ "US" ], "link_domains": [ "uphold.com" ], "doc_hash": "c4d1e9e03c1190585fefbabc64f4bf5202677a55c1bf76a0d170faa2da5b8624", "script_hashes": [ "bca1dc75f11a38eda6fb3eb078b6a3192e36212e69fc86e9b941a5662c08d43d" ], "globals": [ "__reactRouterVersion", "Buffer" ], "tls": { "san": [ "uphold-careers.com", "www.uphold-careers.com" ], "cipher": "AES_256_GCM", "issuer": "YE1", "subject": "uphold-careers.com", "protocol": "TLS 1.3", "valid_to": "2027-01-13T12:08:40Z", "valid_from": "2026-10-15T12:08:41Z" }, "domain_age_days": 5, "apex_age_days": 5, "tls_age_days": 5, "tls_valid_days": 89, "requests": 7, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 100, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "uphold" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Uphold" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "nginx/1.24.0 (Ubuntu)", "content-type": "text/html" } }, "cf": { "v": 1, "fetched_at": "2026-10-22T02:48:44Z", "uuid": "4f50137a-4ee8-49a7-b4aa-e9f1d87a8419", "scanned_at": "2026-10-22T02:48:06Z" }, "vt": { "v": 1, "fetched_at": "2026-10-22T02:47:58Z", "analysis_at": "2026-10-19T15:57:15Z", "stats": { "timeout": 0, "harmless": 48, "malicious": 8, "suspicious": 0, "undetected": 36 }, "detections": { "CRDF": "malicious", "Lionic": "phishing", "Webroot": "malicious", "Emsisoft": "phishing", "Fortinet": "phishing", "Netcraft": "malicious", "alphaMountain.ai": "phishing", "Google Safe Browsing": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "registrar": "Ultahost, Inc.", "created": "2026-10-15T09:06:57Z", "expires": "2027-10-15T09:06:57Z", "updated": "2026-10-15T09:06:57Z", "first_seen": "2026-10-15T10:30:57Z", "dns": [ { "ttl": 14400, "type": "NS", "value": "ns3.ultahost.com" }, { "ttl": 1500, "type": "SOA", "rname": "hostmaster.ultahost.com", "value": "ns1.ultahost.com" }, { "ttl": 14400, "type": "MX", "value": "uphold-careers.com", "priority": 15 }, { "ttl": 4818, "type": "A", "value": "95.169.180.51" }, { "ttl": 14400, "type": "NS", "value": "ns4.ultahost.com" }, { "ttl": 14400, "type": "NS", "value": "ns1.ultahost.com" }, { "ttl": 14400, "type": "MX", "value": "mail.uphold-careers.com", "priority": 10 }, { "ttl": 14400, "type": "TXT", "value": "v=spf1 a mx ip4: ~all" }, { "ttl": 14400, "type": "NS", "value": "ns2.ultahost.com" } ], "dns_at": "2026-10-16T00:23:55Z", "jarm": "28d28d28d00028d00042d42d000000831b6af40378e2dd35eeac4e9311926e", "cert": { "san": [ "uphold-careers.com", "www.uphold-careers.com" ], "issuer": "Let's Encrypt / YE1", "serial": "5fd49f94e290754c5b3df54fac1a490587c", "sha256": "3657b6f672fec6179d35c0ec815bce12b026bab1ca1208787572069279c82747", "subject": "uphold-careers.com", "valid_to": "2027-01-13T12:08:40Z", "valid_from": "2026-10-15T12:08:41Z" }, "whois": { "registrar": "Ultahost, Inc.", "registrar_iana_id": "4331", "registrar_url": "https://ultahost.com/", "created": "2026-10-15T09:06:57Z", "updated": "2026-10-15T09:06:57Z", "expires": "2027-10-15T09:06:57Z", "status": [ "ok" ], "nameservers": [ "ns1.ultahost.com", "ns2.ultahost.com", "ns3.ultahost.com", "ns4.ultahost.com" ], "dnssec": "unsigned" }, "rdap": { "status": [ "active" ], "events": { "last changed": "2026-10-15T00:00:00Z", "registration": "2026-10-15T00:00:00Z", "registrar expiration": "2027-10-15T00:00:00Z", "last update of RDAP database": "2026-10-15T10:32:00Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-22T02:49:22Z", "caa_records": { "domain": "uphold-careers.com" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "dns_server": { "ns": [ { "ip": "94.130.75.18", "host": "ns3.ultahost.com" }, { "ip": "167.71.73.238", "host": "ns1.ultahost.com" }, { "ip": "149.28.254.81", "host": "ns4.ultahost.com" }, { "ip": "51.38.114.43", "host": "ns2.ultahost.com" } ], "zone": "uphold-careers.com" }, "location": { "ip": "95.169.180.51", "asn": "262287", "org": "Keyweb AG IP Network", "city": "Chicago", "country": "US" }, "dns": { "A": [ "95.169.180.51" ], "NS": [ "ns1.ultahost.com", "ns4.ultahost.com", "ns3.ultahost.com", "ns2.ultahost.com" ], "SOA": "{\"nsname\": \"ns1.ultahost.com\", \"hostmaster\": \"hostmaster.ultahost.com\", \"serial\": 2026102120, \"refresh\": 10800, \"retry\": 3600, \"expire\": 1209600, \"minttl\": 3600}" }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "95.169.180.51", "family": 4 }, "subdomains": { "count": 1, "subdomains": [ "www.uphold-careers.com" ] }, "whois": { "registrar": "Ultahost, Inc.", "created": "2026-10-15T09:06:57Z", "updated": "2026-10-22T02:46:28Z", "expires": "2027-10-15T09:06:57Z", "status": [ "clientHold https://icann.org/epp" ], "nameservers": [ "ns1.ultahost.com", "ns2.ultahost.com", "ns3.ultahost.com", "ns4.ultahost.com" ] } } } ```