secure-uphold-login[.]created[.]app

This domain, secure-uphold-login.created.app, is under investigation for credential theft phishing targeting users of financial platforms. Analysis indicates the site impersonates login portals to harvest account credentials, though no specific brand logos or trademarks were confirmed in initial triage. The infrastructure lacks overt ties to known crypto drainer kits or advanced evasion techniques, suggesting a simpler, opportunistic attack vector. Technical indicators reveal the domain currently resolves to IP address 216.150.16.129, with a Let's Encrypt SSL certificate providing HTTPS encryption. VirusTotal scans returned 0 detections out of 95 engines, indicating no prior flagging by security vendors. The domain registrar is Namecheap, and creation metadata remains unverified pending further WHOIS analysis. Google Safe Browsing (GSB) status is unlisted, and no blocklist entries were identified at the time of assessment. The domain has been taken offline, reducing immediate exposure risk. However, the absence of prior detections and the use of a legitimate SSL provider suggest potential for rapid redeployment under a new subdomain or similar infrastructure. Organizations should monitor for related domains leveraging the same IP or certificate authority, and users should verify financial platform URLs via official sources before entering credentials. Remaining risk includes possible credential reuse across other services by affected individuals.