my-uphldlgn-io[.]created[.]app

This domain, my-uphldlgn-io.created.app, poses a significant threat as a brand impersonation scam targeting PayPal users. The site is designed to deceive visitors into entering their login credentials by presenting a fraudulent interface resembling a legitimate financial platform. Instead of accessing a genuine service, users unknowingly submit sensitive information directly to threat actors, who can then exploit it for unauthorized account access, financial theft, or further phishing campaigns. The site’s page title, 'Uphold Login - Secure Access to Your Digital Assets | Multi-Currency Platform 2024,' is crafted to mislead users into believing they are interacting with a trusted cryptocurrency platform, further increasing the risk of credential compromise. Analysis indicates this domain is part of a coordinated phishing operation. It was registered on May 21, 2026, through Tucows Domains Inc, a detail that raises suspicion due to the future creation date, suggesting potential domain spoofing or backdating. The domain resolves to the IP address 216.150.16.65 and uses a Let’s Encrypt SSL certificate, which, while providing encryption, does not guarantee legitimacy. Security vendors have flagged the domain on VirusTotal, with 13 out of 95 engines detecting malicious activity. Additionally, the domain appears on three security blocklists, and Google Safe Browsing explicitly labels it as a phishing threat. These indicators confirm the domain’s involvement in fraudulent activity. If you visited my-uphldlgn-io.created.app or entered any information on the site, immediate action is required. First, cease all interaction with the domain and avoid clicking any links or downloading files from it. Change the passwords for any accounts accessed or entered on the site, prioritizing financial and email accounts. Enable multi-factor authentication where available to add an extra layer of security. Monitor your accounts for unauthorized transactions or suspicious activity, and report any anomalies to your financial institution. Consider running a security scan on your device to detect potential malware. Finally, report the domain to relevant authorities or anti-phishing organizations to help prevent further victims.