uphld-lgnn-en[.]pineapple[.]page

The domain uphld-lgnn-en.pineapple.page is actively engaged in brand impersonation targeting Apple users, specifically designed to harvest login credentials. Analysis indicates this is a high-risk phishing operation, with the page title explicitly mimicking legitimate authentication portals: "Log In | Uphold®: | Sign In to Your Account." The threat remains operational, posing significant risk to unsuspecting visitors seeking Apple services. Infrastructure analysis reveals multiple concrete indicators of malicious activity. The domain is flagged by 19 of 95 security vendors on VirusTotal, including detection by Google Safe Browsing as a phishing site. It resolves to IP address 216.150.16.1, hosted on Amazon.com, Inc. infrastructure (AS16509) in the United States. The domain is registered through Squarespace Domains II LLC and appears on at least one security blocklist. A Let's Encrypt SSL certificate (R13) is deployed, providing a false sense of security to potential victims. The combination of these technical factors confirms the domain's fraudulent nature. Current status shows the phishing site remains active, continuing to present a credible facade of an Apple login portal. Users are strongly advised to avoid interaction with this domain entirely. Organizations should implement immediate blocking at the network level, utilizing the IP address and domain name as indicators of compromise. Security teams are recommended to monitor for credential submissions to this endpoint and initiate password resets for any accounts potentially exposed. The presence of this domain on multiple security platforms underscores the need for heightened vigilance against similar brand impersonation threats.