Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
upshub[.]app
“Manage Customer Orders With UPS Marketplace Shipping”
साक्ष्य सारांश
The domain upshub.app was registered on April 29, 2026 through Name.com, Inc. and currently resolves to the IP address 185.158.133.1, which belongs to Cloudflare, Inc. (AS13335) located in Poland. The site serves a page titled “Manage Customer Orders With UPS Marketplace Shipping,” explicitly targeting the UPS brand. The SSL certificate is issued by Google Trust Services under the WE1 intermediate, indicating use of a valid TLS certificate. HTTP requests receive a 302 redirect response, and the service advertises HSTS support. The domain is listed on a single security blocklist and has been flagged by PhishDestroy. VirusTotal reports 20 of 91 security vendors flagging the domain as malicious. Google Safe Browsing classifies the URL under the “SOCIAL_ENGINEERING” category. The nameserver set consists of ns1hwy.name.com, ns2fln.name.com, ns3fqs.name.com, and ns4jnz.name.com. The Gridinsoft trust score is 0/100, reinforcing the malicious assessment. The infrastructure indicates a typical brand‑impersonation operation that leverages reputable TLS and Cloudflare front‑end services to increase credibility. While the exact page content beyond the title has not been examined, the combination of brand targeting, redirect behavior, and multiple vendor detections suggests an active phishing campaign aimed at harvesting UPS customer credentials or payment information. Defenders should block the domain at DNS and proxy layers, monitor for outbound connections to 185.158.133.1, and update detection signatures to include the observed redirect pattern and the specific page title. Continuous observation is advised to capture any changes in payload or additional infrastructure components.
भेजे गए प्रमाण का स्नैपशॉट
- भेजा गया
- लेज़र रिकॉर्ड
- 1
- केस आईडी
PD-20260530-16EC1B- कैप्चर किए गए पेज का शीर्षक
- Manage Customer Orders With UPS Marketplace Shipping
- PDF दस्तावेज़
- PDF प्रमाण
कानूनी आधार
प्रमाण का पूरा पाठ
Acceptable Use Policy (AUP): The domain upshub.app is engaged in phishing activities, which directly contravenes the AUP's prohibition against illegal activities and fraud.
Terms of Service (TOS): The ongoing use of this domain for deceptive practices constitutes a violation of the TOS, which reserves the right to suspend or terminate services for such infractions.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and networks, which includes phishing schemes that deceive users into providing sensitive information.
CAN-SPAM Act: This U.S. law regulates commercial email and prohibits deceptive practices in email marketing, including phishing attempts that mislead recipients.
Regulatory Note: Failure to act on this report may expose your organization to legal liabilities and regulatory scrutiny. Immediate action is recommended to mitigate potential risks associated with hosting this phishing domain.
Data Coverage
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | upshub.app |
malicious | Sinkholed |
| DigiCert UltraDNS | upshub.app |
malicious | Sinkholed |
| DNS4EU | upshub.app |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
ब्लॉकलिस्ट कवरेज
10 निगरानी वाले बाहरी स्रोत · संग्रहीत स्नैपशॉट 11/08/2026
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणDNS, TLS नाम और समय-मुद्राएँ
ICANN OVERSIGHT
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें
2 उच्च-विश्वसनीयता वाली तकनीकें पहचानी गईं
वायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of upshub.app · checked May 30, 2026
क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।