navuphold[.]created[.]app

This domain, navuphold.created.app, is actively serving content over HTTPS with a valid TLS certificate issued by a free certificate authority and returns HTTP 200. DNS resolution points to 216.150.16.65, an address owned by Amazon.com, Inc. (AS16509) located in the United States. The domain is delegated to ns1.vercel-dns.com and ns2.vercel-dns.com and was registered through Tucows Domains Inc. on July 12, 2023. The site’s page title advertises an “Uphold™ Login – Official Sign-In for Your Digital Asset Account,” yet threat intelligence classifies the campaign as a brand‑impersonation targeting Apple and as a tech‑support scam. Multiple security vendors (14 of 95) have flagged the domain, and reputation services label it as social‑engineering. The domain appears on at least one public blocklist and is currently listed by an anti‑phishing service. Detected infrastructure components include a Node.js runtime, a modern JavaScript framework, and content delivery acceleration, indicating a typical abuse of cloud hosting platforms. Risk is assessed as high and the infrastructure remains active. Defenders should block DNS resolution to the host, enforce web‑filtering rules for the exact host name, and monitor for credential‑phishing attempts that reference Apple or tech‑support narratives. Continuous re‑evaluation is recommended as the site may evolve its content.