uphold-pro[.]com

PhishDestroy identifies Uphold-Pro.com as a live crypto drainer targeting unsuspecting users by impersonating the legitimate Uphold exchange. This deceptive domain, registered on November 18, 2025, is engineered to trick visitors into connecting wallets or entering login details, allowing attackers to drain cryptocurrency holdings instantly. The site leverages a falsified SSL certificate from Google Trust Services and is hosted on Cloudflare IP 188.114.97.3, enhancing its appearance of legitimacy while masking malicious intent. This domain was flagged due to zero detections on VirusTotal (2 out of 95 scanners) as of the latest scan, despite its recent creation and active hosting. It was registered through Gname.com Pte. Ltd., a registrar known for accommodating high-risk domains. The combination of a fresh registration, low detection rate, and sophisticated mimicry of a trusted brand increases the likelihood of successful credential theft and cryptocurrency theft. If you visited Uphold-Pro.com, stop all crypto transactions immediately. Disconnect any connected wallets from websites or apps. Clear browser cache and cookies. Consider using a dedicated device for financial transactions moving forward. Report the domain to your wallet provider and relevant cybersecurity platforms. Stay vigilant against lookalike domains and verify URLs manually before entering sensitive information.