uplandme[.]info

Analysis indicates that the domain uplandme.info was registered on 21 February 2026 through NiceNIC International Group Co., Limited. The domain resolves to the IPv4 address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. DNS resolution is delegated to michelle.ns.cloudflare.com and amit.ns.cloudflare.com, confirming the use of Cloudflare’s authoritative name servers. The TLS certificate presented is issued by Google Trust Services under the WE1 intermediate, indicating a valid HTTPS endpoint. The site returns an HTTP 403 status code, which suggests that direct content retrieval is being restricted, yet the page title that can be extracted is “$UPX Airdrop”.

The title, combined with the classification of the campaign as a Crypto Scam and the identification of an “Airdrop Scam” phishing kit, aligns with a typical cryptocurrency‑related phishing vector that attempts to lure victims with promised token airdrops. Reputation services have flagged the domain on three security blocklists. VirusTotal analysis shows that 11 of 93 scanning engines have raised detections, reinforcing the malicious assessment. Additional protective products, including PhishDestroy, MetaMask, and SEAL, have recorded the domain as blocked. The Gridinsoft trust score is 0 out of 100, further confirming a lack of benign reputation.

Technology profiling reveals the presence of Hostinger hosting services, Cloudflare Browser Insights, and HTTP/3 support, indicating that the backend infrastructure is hosted on a shared provider while leveraging Cloudflare’s edge network for delivery and performance optimization. Defenders should consider the domain high risk and active, and incorporate it into deny‑list rules across web gateways, DNS filters, and endpoint protection suites. Continuous monitoring of the associated IP address and its ASN is advised, as the Cloudflare network may be used for other malicious actors.