uphold-login-docs[.]created[.]app

This domain, uphold-login-docs.created.app, is actively engaged in credential phishing targeting users of the Uphold cryptocurrency platform. Analysis indicates the site presents a fraudulent login interface designed to harvest credentials, likely for subsequent unauthorized account access or fund theft. No direct evidence of a crypto drainer kit was observed, but the domain follows a pattern consistent with brand impersonation phishing campaigns targeting financial services. Infrastructure analysis reveals the domain was registered on May 21, 2026, through Tucows Domains Inc, and currently resolves to the IP address 216.150.1.193, hosted by Vercel, Inc in the United States. The SSL certificate is issued by Let's Encrypt (R13). Google Safe Browsing has flagged the domain as phishing, and it is detected by 4 out of 95 security vendors on VirusTotal. The domain appears on three security blocklists and is actively blocked by multiple threat intelligence feeds. As of the latest verification, uphold-login-docs.created.app remains active and continues to pose a high risk to users. Immediate response actions include reporting the domain to hosting providers and certificate authorities for takedown, as well as updating security blocklists. Users are advised to avoid interacting with the domain, verify website authenticity through official channels, and enable multi-factor authentication on financial accounts to mitigate credential theft risks.