home-en-uphold-io-us[.]pages[.]dev

This domain was designed to look like an official Uphold page, tricking visitors into entering their login credentials or personal information. It's a classic brand impersonation scam, where cybercriminals copy a legitimate site's appearance to steal sensitive data. Fortunately, the site has been taken offline, but the threat remains for anyone who may have visited before it was shut down.

PhishDestroy's analysis shows that 11 out of 95 security vendors on VirusTotal flagged this domain as malicious, a strong indicator of its dangerous nature. The domain was created on October 14, 2025, and was registered through Cloudflare, Inc., a common registrar used by both legitimate and malicious sites. The page title displayed by Cloudflare was "Suspected phishing site | Cloudflare," confirming that hosting provider itself had already identified and blocked it. The domain resolves to IP address 172.66.47.138 and uses an SSL certificate issued by Google Trust Services, which unfortunately gives visitors a false sense of security.

If you visited this site and entered any personal information, such as your Uphold username, password, or two-factor authentication codes, you should immediately change your password on the real Uphold platform and enable additional security measures like multi-factor authentication. Monitor your accounts for any unauthorized activity and consider contacting Uphold support for further assistance. Even though the site is offline, the data you may have provided could still be exploited, so swift action is essential.