uphold-login-website[.]created[.]app

The domain uphold-login-website.created.app is assessed at a high risk level and is specifically identified as a credential phishing site. This type of threat is designed to steal login credentials and other sensitive information from unsuspecting users by mimicking legitimate login pages.

Analysis indicates that uphold-login-website.created.app has been flagged by 16 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion among the security community. The domain resolves to the IP address 216.150.16.1 and was created on May 21, 2026, through Tucows Domains Inc. Google Safe Browsing has identified the site as engaging in social engineering tactics, which often involve tricking users into providing personal information. The domain appears on three security blocklists and is blocked by MetaMask, PhishDestroy, and SEAL. The Gridinsoft trust score for this domain is 0 out of 100, indicating a complete lack of trust. The site uses technologies such as Node.js, React, Google Cloud, Vercel, Next.js, LaunchDarkly, HSTS, and Google Cloud CDN, which are common in modern web development but can also be utilized for malicious purposes. The SSL certificate for the domain is issued by Let's Encrypt, which is a trusted certificate authority but is frequently used by attackers to add a false sense of security.

To mitigate the risk of credential theft associated with this domain, users are advised to verify the URL of the login page they are accessing and ensure it matches the official Uphold website. Security teams should add this domain to their blocklists and monitor for any similar domain names or IP addresses. Additionally, implementing multi-factor authentication (MFA) and educating users about the signs of phishing attacks can significantly reduce the likelihood of successful credential theft.