uphold-com-cd[.]typedream[.]app

PhishDestroy has identified uphold-com-cd.typedream.app as a high-risk generic phishing site impersonating the Uphold brand. The domain was registered through Typedream and hosted on IP 188.114.97.3, using an SSL certificate issued by Google Trust Services (WE1). The page title, "Log In | Uphold® - Sign In to Your Account," clearly indicates an attempt to harvest login credentials from unsuspecting victims. No specific drainer kit was detected, but the site's design mimics the legitimate Uphold login page to deceive users.

Technical analysis reveals severe red flags: VirusTotal reports a detection ratio of 4 out of 95 security vendors, with Google Safe Browsing explicitly flagging the domain for phishing. The domain appears on three separate security blocklists, underscoring its malicious nature. The registrar is Typedream, a known platform for quickly spinning up deceptive sites, and the IP address 188.114.97.3 is associated with Cloudflare's infrastructure, which can complicate takedown efforts. The site's creation date is not provided, but its current status is offline, indicating that proactive measures have been taken.

As of now, uphold-com-cd.typedream.app has been taken offline, mitigating the immediate threat. However, the risk remains that similar domains may appear under different subdomains or variations. Users who may have interacted with this site should immediately change their Uphold passwords and enable two-factor authentication. PhishDestroy recommends monitoring for suspicious account activity and reporting any unauthorized transactions to Uphold support. Staying vigilant against phishing attempts that spoof trusted brands is crucial for maintaining security.