learn-uphold[.]created[.]app
Pemeriksaan phishing dan keamanan learn-uphold.created.app
“Uphold LogIn ®: | Sign In to Your Account”
learn-uphold.created.app — Terselubung · dapat dijangkau (HTTP 404). Peniruan identitas merek: Uphold; Jenis penipuan: Credential Phishing. Ringkasan bukti: VirusTotal 11/91 (alphaMountain.ai, ESET, Emsisoft, Forcepoint ThreatSeeker, Fortinet); URLQuery 2 alerts; URLScan malicious verdict; Google Safe Browsing flagged; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; cloaking observed; PhishDestroy score 83/100. Registrar: Tucows Domains.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Ringkasan bukti
learn-uphold.created.app is a subdomain of created.app. PhishDestroy first observed the hostname on May 21, 2026. The hostname explicitly references Uphold; stored content metadata identifies the same apparent target. Evidence score: 83/100 (critical).
8 independent sources recorded positive findings: VirusTotal, MetaMask, SEAL, Google Safe Browsing, Spamhaus DBL, and Cloudflare Radar, and others. VirusTotal recorded 11 detections among 91 engines: alphaMountain.ai, ESET, Emsisoft, Forcepoint ThreatSeeker, Fortinet, Google Safebrowsing, Kaspersky, Lionic on Jul 18, 2026 at 18:45 UTC. MetaMask and SEAL listed the hostname in the separate external-blocklist snapshot on Aug 9, 2026 at 06:20 UTC. Google Safe Browsing flagged the domain: Social Engineering on Jun 26, 2026 at 02:59 UTC. Spamhaus DBL: DBL_PHISH on Jul 13, 2026 at 14:35 UTC.
Cloaking was recorded with HTTP 404 on Aug 9, 2026 at 01:04 UTC. The cloaking probe recorded status split conditional delivery at 1/100 on Aug 9, 2026 at 01:04 UTC: dead_http: raw=http_404; http=404; via=https_proxy; server=Vercel. Registration records for the registrable domain created.app list Tucows Domains Inc as the registrar and May 21, 2026 as the creation date. At collection time, the hostname resolved to 216.150.16.1 on AS16509 (Amazon.com, Inc.). The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery.
Cakupan data12 recorded checks
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: created.app
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain created.app behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 9 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org Keyakinan 100%React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org Keyakinan 100%Next.js is a React framework for developing single page Javascript applications.
nextjs.org Keyakinan 100%LaunchDarkly is a continuous delivery and feature flags as a service platform that integrates into a company's current development cycle.
launchdarkly.com Keyakinan 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Cloud CDN uses Google's global edge network to serve content closer to users.
cloud.google.com Keyakinan 100%Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of learn-uphold.created.app · checked Jun 26, 2026
Bukti & Laporan EksternalIndependent lookups and source reports
PD-20260521-BEB82D Recipient: abuse@vercel.com Victim safety and official reportingImmediate actions and verified reporting channels
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.