auth-uphold-x-cdn[.]typedream[.]app

PhishDestroy identifies auth-uphold-x-cdn.typedream.app as a high-risk credential theft phishing domain impersonating Uphold, a digital wallet and cryptocurrency exchange platform. The domain was registered through Typedream and designed to harvest login credentials from unsuspecting users. No specific drainer kit was identified, but the site's appearance mimics legitimate Uphold authentication pages.

Technical indicators: VirusTotal flagged the domain with 10/95 security vendors, confirming malicious activity. The domain resolves to IP 188.114.96.3, with an SSL certificate issued by Google Trust Services (WE1). Google Safe Browsing flags the domain as phishing. Creation and registration details are not publicly available, but the site was taken offline shortly after detection. The domain is not listed on major blocklists, but the low VT score suggests limited detection at the time of analysis.

Current status: The phishing domain is offline and no longer resolving. Response actions include takedown via Typedream and internal blacklisting. Remaining risk is low, but users who may have interacted with the site should change their Uphold passwords and enable two-factor authentication as a precaution. PhishDestroy recommends monitoring accounts for unauthorized access and reporting any suspicious activity.