# uphold-exchange-com.pro — SUSPICIOUS

> PhishDestroy flags uphold-exchange-com.pro as a crypto drainer site mimicking Uphold login. Created March 15, 2026, it has 0/95 VirusTotal detections—verify.

## Summary
PhishDestroy identifies uphold-exchange-com.pro as a recently activated phishing domain designed to impersonate the legitimate Uphold cryptocurrency exchange. Security researchers assess this site as a high-risk fake login portal intended to harvest user credentials and potentially deploy crypto drainer scripts once authentication is achieved. The threat actor leverages visual similarity to the real Uphold platform, including deceptive SSL encryption via Let's Encrypt, to trick visitors into entering sensitive wallet information or two-factor authentication codes. Given the domain's recent creation and low detection rate, users are strongly advised to avoid interacting with this page and verify any Uphold-related links through official channels.  This domain was flagged by PhishDestroy during routine surveillance with exact indicators including 0 detections out of 95 VirusTotal engines as of assessment, a March 15, 2026 creation date, and hosting on IP address 188.114.97.3. The registrar is NICENIC INTERNATIONAL GROUP CO., LIMITED, a provider known for accommodating high-volume domain registrations that may lack adequate abuse monitoring. The presence of a valid Let's Encrypt SSL certificate further increases the appearance of legitimacy despite the malicious intent. These technical markers suggest a newly established, possibly automated phishing operation aimed at capturing login credentials for cryptocurrency accounts.  If you visited uphold-exchange-com.pro, immediately cease interaction and do not input any credentials or wallet details. Check your browser history and clear any stored session data related to this domain. If you entered login information, immediately change your Uphold password using the official website (uphold.com) and enable two-factor authentication. Scan your device with updated antivirus software and monitor your crypto wallets for unauthorized transactions. Report the incident to Uphold’s support and PhishDestroy to help protect others from this threat. Always verify links via official Uphold communication channels or trusted bookmarks before accessing financial platforms.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-15 15:04:27
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.97.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/05312a33-bb19-49de-b09e-31ecd177aeef
- PhishDestroy: https://phishdestroy.io/domain/uphold-exchange-com.pro/
- LLM endpoint: https://phishdestroy.io/domain/uphold-exchange-com.pro/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/uphold-exchange-com.pro/
Last updated: 2026-03-23