# uphold-com.pro — SUSPICIOUS

> Exposed crypto wallet phishing site uphold-com.pro impersonating Uphold. Flagged by 0/95 VirusTotal vendors, with domain created March 15, 2026.

## Summary
PhishDestroy identifies uphold-com.pro as an active cryptocurrency wallet phishing domain masquerading as the legitimate Uphold platform. This fraudulent site, currently under investigation, employs a homograph attack using a visually similar domain name to deceive users into entering their credentials or cryptocurrency wallet private keys. The domain’s malicious infrastructure is designed to harvest sensitive financial data under the guise of a trusted service, posing a significant risk to victims' assets and personal information.  

This domain was flagged by 0 of 95 VirusTotal vendors as of the latest scan, indicating it has not yet been widely detected by security solutions. The domain uphold-com.pro was registered on March 15, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar known for accommodating high-risk domain registrations. It resolves to IP address 172.67.137.238 and holds a valid SSL certificate issued by Let’s Encrypt, which may further enhance its legitimacy in the eyes of unsuspecting users. The domain's recent creation and lack of detections suggest it is part of a targeted or newly deployed phishing campaign.  

As the threat status of uphold-com.pro remains active and under investigation, immediate caution is advised for all users. PhishDestroy recommends blocking access to this domain at the network level and refraining from interacting with any links or content associated with it. Users who may have already entered sensitive information on this site are urged to immediately revoke any exposed credentials, transfer funds to new wallets, and monitor accounts for unauthorized access. Additionally, reporting this domain to cybersecurity platforms and antivirus vendors can help accelerate its detection and remediation. For ongoing protection, enable multi-factor authentication on all cryptocurrency-related accounts and verify website URLs through official channels before entering any personal or financial data.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-15 15:04:27
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 172.67.137.238

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/ffe0844b-ebb8-4f03-8fd3-6c7e719c5f4b
- PhishDestroy: https://phishdestroy.io/domain/uphold-com.pro/
- LLM endpoint: https://phishdestroy.io/domain/uphold-com.pro/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/uphold-com.pro/
Last updated: 2026-03-23