appe-xplore-uphold[.]zapier[.]app

The domain appe-xplore-uphold.zapier.app is currently active and has been identified as a generic phishing infrastructure. Detection platforms have flagged the domain, with 16 of 91 security vendors on VirusTotal reporting it as malicious. Google Safe Browsing classifies the site as social engineering, and the domain appears on two independent security blocklists. Defensive feeds from PhishDestroy and SEAL have already added the domain to their blocklists, indicating that the threat is recognized across multiple mitigation services.

Technical resolution shows the domain points to the IP address 64.239.109.65; no authoritative nameserver information is available (NS_NOT_FOUND), which complicates standard DNS‑based takedown attempts. The lack of publicly disclosed SSL/TLS details, HTTP response codes, or page title information limits deeper content analysis, so the precise phishing lure and any credential‑harvesting pages remain unverified. Given the confirmed presence on reputable blocklists and the multiple vendor detections, defenders should proactively deny traffic to both the domain and its resolving IP at perimeter firewalls and DNS filters. Continuous monitoring of the IP for additional hostnames is advised, as the same infrastructure may be reused for related campaigns.

Organizations should also update endpoint protection signatures to incorporate the latest VirusTotal detection payloads associated with this domain. Because the domain is hosted under the zapier.app sub‑domain, any trusted relationships with Zapier services should be reviewed to ensure internal users are not inadvertently directed to this malicious endpoint. In summary, the available evidence confirms a high‑risk phishing operation; immediate blocklisting and ongoing surveillance are recommended to mitigate exposure.