learn-uphld-webs-auth[.]typedream[.]app

PhishDestroy identifies learn-uphld-webs-auth.typedream.app as an active credential harvesting site designed to trick users into surrendering login credentials under the guise of a legitimate learning platform. The domain presents itself as an upholstery web design authentication portal but functions solely to capture sensitive user inputs—such as usernames, passwords, and possibly payment details—via a fraudulent login interface. Security analysis confirms this domain engages in classic social engineering tactics, including mimicking trusted services and using typosquatting to exploit user trust. This threat is particularly dangerous for users who may mistake the domain for a legitimate service due to the inclusion of recognizable platform branding (Typedream.app subdomain structure).

PhishDestroy confirms this domain was flagged by 9 out of 95 VirusTotal security vendors, blocked by MetaMask and SEAL security systems, and listed as a SOCIAL_ENGINEERING threat by Google Safe Browsing. The domain resolves to IP 188.114.97.3 and has been detected across 2 additional public blocklists. This elevated threat level—supported by the combination of low detection ratio (9/95) and multi-engine blocking—indicates a sophisticated attempt to bypass traditional security measures while actively targeting users.

Users who visited learn-uphld-webs-auth.typedream.app should immediately inspect browser history and extensions for unauthorized access, check for suspicious login activity on linked accounts, and change passwords for any services accessed around the time of visit. Run a full system scan using reputable antivirus software to detect credential-stealing malware or browser extensions. Enable multi-factor authentication on all critical accounts and report any unauthorized transactions or data exposure to the respective platform providers. Avoid interacting with this domain or related links in email, social media, or search results. Monitor financial accounts and credit reports for signs of identity theft following any potential exposure.