upihold-wailet-en[.]created[.]app

The domain upihold-wailet-en.created.app has been observed on a security blocklist maintained by PhishDestroy, indicating that it is actively being used for malicious purposes. VirusTotal records show that the domain was scanned by 91 antivirus and URL‑reputation vendors; none of the vendors reported a detection at the time of analysis, but the absence of a detection does not imply the site is benign. No additional telemetry such as Safe Browsing status, Open Threat Exchange (OTX) alerts, registrar information, IP address, hosting provider, SSL certificate details, HTTP response codes, or trust‑score metrics are present in the current data set.

Consequently, the visibility into the underlying infrastructure remains limited. The primary actionable intelligence is the blocklist entry, which suggests that network defenders should enforce blocking of the domain at perimeter firewalls, DNS resolvers, and endpoint protection solutions.

Continuous monitoring of the domain on threat‑intel feeds is advised, and any future detection from sandbox or URL‑reputation services should be escalated for deeper investigation. Analysts should also consider correlating internal logs for traffic to this domain to identify potential compromise attempts or credential harvesting activity.