uphldlog[.]created[.]app

This domain, uphldlog.created.app, is identified as a credential harvesting phishing site designed to impersonate a legitimate financial services platform. Analysis indicates the site employs social engineering tactics to deceive users into submitting sensitive login credentials, payment details, or personal information under the guise of a trusted interface. The page title, Uphold™, directly mimics the branding of a well-known digital asset platform, increasing the likelihood of successful deception among targeted users. Infrastructure analysis reveals multiple high-confidence indicators of malicious activity. The domain resolves to IP address 216.150.1.193 and is registered through Name.com, Inc. It is currently flagged by 13 out of 95 security vendors on VirusTotal, with a Gridinsoft trust score of 0 out of 100. The domain appears on three independent security blocklists and is actively blocked by multiple browser-based security extensions. The site was operational until recently but has since been taken offline, though residual risk remains for users who may have interacted with it prior to deactivation. Users who visited uphldlog.created.app or entered credentials on the site should immediately revoke any submitted login details from all associated accounts. It is recommended to enable multi-factor authentication on all financial and cryptocurrency platforms, monitor accounts for unauthorized transactions, and review connected devices for signs of compromise. Given the domain's use of HSTS and Google Cloud CDN, users should also clear cached browser data to prevent potential redirection or persistent access by malicious scripts. If financial data was exposed, affected individuals should report the incident to relevant financial institutions and consider credit monitoring services.