uphold-loges[.]created[.]app

This domain, uphold-loges.created.app, is actively engaged in crypto drainer phishing operations designed to steal digital wallet credentials and automatically transfer cryptocurrency assets without user consent. Victims are typically lured through deceptive links in emails, social media, or malicious advertisements, often impersonating legitimate cryptocurrency platforms or services. The site employs realistic login interfaces and transaction prompts to trick users into entering sensitive wallet information, which is then exploited to drain funds. Analysis indicates the domain was registered on May 21, 2026, through Tucows Domains Inc, an unusual registration date that may suggest domain spoofing or backdating. As of the latest scan, 13 out of 95 security vendors on VirusTotal have flagged the domain as malicious, and it appears on three independent security blocklists. The site resolves to the IP address 216.150.1.129, hosted by Vercel, Inc in the United States, and uses a Let's Encrypt SSL certificate (R13) to present a false sense of security. The page title is generically labeled 'Homepage,' a common tactic to avoid detection by automated scanners. If you have visited uphold-loges.created.app or entered any information on the site, immediate action is required. Disconnect the device from the internet to prevent further data exfiltration. Revoke any active wallet sessions and transfer remaining assets to a new, secure wallet using a different device. Monitor all linked accounts for unauthorized transactions and enable multi-factor authentication where available. Report the incident to relevant financial platforms and consider filing a report with local cybercrime authorities. Do not reuse passwords or recovery phrases associated with the compromised session. Regularly check browser extensions and installed applications for unauthorized or malicious software that may have been installed during the visit.