portal-uphold-en-auths[.]created[.]app

This domain, portal-uphold-en-auths.created.app, has been assessed with an elevated risk level due to its classification as a generic phishing site specifically designed to mimic the Uphold login page. PhishDestroy identified this threat through analysis of its page title, which explicitly reads 'Uphold Login | Secure Access to Your Uphold Account,' and its status as a confirmed phishing domain. The site is now offline, but its previous activity posed a direct risk to Uphold users seeking secure access to their accounts.

Technical indicators provide a clear picture of the threat. VirusTotal flagged the domain with 1 out of 95 security vendors marking it as malicious, and it appears on three security blocklists. The domain resolves to IP address 216.150.1.129 and was registered through Tucows Domains Inc. Its SSL certificate was issued by Let's Encrypt (R13), a common choice for fraudulent sites seeking to appear legitimate. The combination of these factors underscores the domain's intent to deceive users into entering sensitive credentials.

For those who may have interacted with this phishing site, immediate action is critical. Users should change their Uphold passwords and enable two-factor authentication if not already active. It is also advisable to monitor account statements for unauthorized transactions and report any suspicious activity to Uphold's support team. Additionally, running a security scan on any device that accessed the site can help detect potential malware or keyloggers. PhishDestroy recommends staying vigilant against similar phishing attempts by verifying URLs before entering credentials.