log-in-uphold-faq[.]tem3[.]io

Analysis indicates that the domain log-in-uphold-faq.tem3.io was registered on 2024-08-02 through GoDaddy and is currently using Cloudflare name servers (justin.ns.cloudflare.com, val.ns.cloudflare.com). The domain resolves to the IP address 188.114.96.3, which is part of a CDN infrastructure commonly used to hide the origin server. The sub‑domain structure ("log‑in‑uphold‑faq") is consistent with attempts to masquerade as a legitimate login or support page for the financial service Uphold, although no direct evidence of the target brand has been captured in the available intelligence. VirusTotal scans have flagged the domain by eight of ninety‑one security vendors, indicating that automated analysis has identified malicious characteristics. The domain remains active as of the report date. Because the content of the site has not been examined, the exact phishing technique (credential harvesting, redirect, etc.) cannot be confirmed. Defenders should treat the domain as high‑risk, add it to URL and DNS blocklists, monitor for outbound connections to the associated IP, and enforce multi‑factor authentication for any credentials that could be targeted. Continuous observation of any changes to the hosting infrastructure or additional detection signals is recommended.