help-upholsd[.]created[.]app

The domain help-upholsd.created.app is assessed as a high-risk generic phishing threat. This domain was designed to mimic the official Uphold login page, potentially to trick users into providing sensitive information such as login credentials and personal data.

Analysis indicates that the domain help-upholsd.created.app has been flagged by 13 out of 95 security vendors on VirusTotal, suggesting a moderate level of recognition as a malicious entity. The domain was registered through Tucows Domains Inc and resolves to the IP address 216.150.1.193. It appears on three security blocklists and has a Gridinsoft trust score of 0/100, indicating a complete lack of trustworthiness. The SSL certificate was issued by Let's Encrypt, a common practice among phishing sites to gain user trust. The domain has been taken offline, but its creation date and the technologies used, including Node.js, React, Google Cloud, Vercel, Next.js, LaunchDarkly, HSTS, and Google Cloud CDN, suggest a sophisticated and well-organized phishing operation.

To mitigate the risk associated with this phishing threat, users are advised to verify the URL of any login page they visit, especially for financial or digital asset management services. Security teams should monitor and block access to this domain and similar variations to prevent potential data breaches. Additionally, implementing multi-factor authentication (MFA) and educating users about phishing tactics can significantly reduce the likelihood of successful attacks.