portal-enterprise-uphold-com[.]created[.]app
“How to Access Your Uphold Account Securely”
portal-enterprise-uphold-com.created.app — 클로킹됨 · 접근 가능. 브랜드 사칭: Uphold; 사기 유형: Generic Phishing. 증거 요약: VirusTotal 11/91 (ADMINUSLabs, alphaMountain.ai, CyRadar, ESET, Forcepoint ThreatSeeker); URLScan malicious verdict; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); cloaking observed; PhishDestroy score 83/100. 등록기관: Name.com.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
This site impersonates the Uphold financial platform, using the page title "How to Access Your Uphold Account Securely" to appear as a legitimate login portal. The domain "portal-enterprise-uphold-com.created.app" employs cloaking via content_split, indicating the site serves different content to evade detection. The primary threat is credential harvesting, where visitors may enter sensitive account information under the false pretense of secure access.
Technical analysis reveals 11 out of 95 VirusTotal vendors flagged the domain as malicious, with detection from ADMINUSLabs, alphaMountain.ai, CyRadar, ESET, and Forcepoint ThreatSeeker. The domain is registered through Name.com, Inc. and resolves to IP address 216.150.16.1, hosted in the United States on AS16509 (Amazon.com, Inc.). Nameservers are ns1.vercel-dns.com and ns2.vercel-dns.com. The domain is currently offline.
The site holds a DOM risk score of 95, indicating a high probability of malicious activity. Its current status is down or offline, which may be temporary or due to takedown efforts. The risk level remains severe for any user who previously interacted with the site, as credentials may have been compromised.
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
ICANN OVERSIGHT
Registration: created.app
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For the registrable domain created.app behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
사용 기술 · 8 identified
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.
nodejs.org 신뢰도 100%React is an open-source JavaScript library for building user interfaces or UI components.
reactjs.org 신뢰도 100%Next.js is a React framework for developing single page Javascript applications.
nextjs.org 신뢰도 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 신뢰도 100%Cloud CDN uses Google's global edge network to serve content closer to users.
cloud.google.com 신뢰도 100%VirusTotal 분석
사이트 성능 분석
Google PageSpeed Insights — mobile performance audit of portal-enterprise-uphold-com.created.app · checked Jun 2, 2026
증거 및 외부 보고서
PD-20260602-F4C9F2 Recipient: abuse@vercel.com 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.