welcome-en-uphold-login[.]created[.]app

This domain, welcome-en-uphold-login.created.app, is confirmed to be a fake login site designed for credential phishing. The threat involves luring users into entering their login credentials on a deceptive webpage, which then captures and misuses these credentials for unauthorized access to user accounts. This can lead to significant financial and personal data loss, making it a high-risk threat.

Analysis indicates that the domain is flagged by 1 out of 95 security vendors on VirusTotal, suggesting a low detection rate that can potentially allow it to evade some security systems. The domain is registered through Tucows Domains Inc and was created on May 21, 2026. It currently resolves to the IP address 216.150.16.65, which is located in the United States and hosted by Vercel, Inc. The site appears on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. The use of a Let's Encrypt SSL certificate (R13) may give a false sense of security to users, as it does not guarantee the legitimacy of the site.

If users have visited this domain, they are advised to immediately change their passwords for any accounts that may have been compromised. It is also recommended to enable multi-factor authentication (MFA) on all critical accounts to add an additional layer of security. Users should monitor their accounts for any unusual activity and report any suspicious incidents to their service providers. Additionally, users should be cautious of unsolicited emails or messages that direct them to login pages and verify the URLs of websites before entering any sensitive information.