awu73m0t-sso-uphold-en[.]vercel[.]app

This domain, awu73m0t-sso-uphold-en.vercel.app, is identified as a generic phishing threat actively impersonating Uphold, a legitimate digital money platform. The site presents a fraudulent login interface designed to harvest user credentials, specifically targeting individuals with Uphold accounts. Analysis confirms its current status as active, with no indications of takedown or mitigation as of the latest verification. Infrastructure analysis reveals the domain was registered through Vercel Inc. on March 26, 2026, resolving to the IP address 216.198.79.195, located in the United States under Vercel, Inc. The SSL certificate is issued by Google Trust Services (WR1), a common practice among phishing sites to appear legitimate. Security vendor detection is significant, with 17 of 95 VirusTotal engines flagging the domain as malicious. The domain appears on three security blocklists and is actively blocked by multiple threat intelligence feeds, including PhishDestroy, MetaMask, and SEAL. The page title, 'Log In* | Uphold : | Sign In to Your Account,' directly mimics Uphold’s official branding to deceive users. Current assessment classifies this domain as a high-risk threat due to its active status, targeted impersonation of a financial service, and confirmed credential harvesting intent. Users are advised to avoid interaction with this domain entirely. Organizations should implement DNS-level blocking for awu73m0t-sso-uphold-en.vercel.app and its associated IP, 216.198.79.195, while monitoring for related indicators of compromise. Individuals who may have entered credentials on this site should immediately reset passwords for Uphold and any other accounts where identical credentials were reused, and enable multi-factor authentication where available.