uphold-en-cdn[.]created[.]app

This domain is a phishing site designed to mimic the official Uphold cryptocurrency platform login page. Visitors are presented with a fraudulent interface labeled 'Log In | Uphold®: | Sign In to Your Account,' intended to trick users into entering their credentials, which are then harvested by attackers. The site specifically targets users of financial services, posing a direct risk of account takeover, unauthorized transactions, and financial loss. Analysis indicates the domain is registered through Name.com, Inc. and currently resolves to the IP address 216.150.16.193. It has been flagged by 14 out of 95 security vendors on VirusTotal, and appears on three independent security blocklists. The SSL certificate is issued by Let’s Encrypt, a common tactic used by threat actors to create a false sense of legitimacy. The domain has since been taken offline, but its infrastructure and registration details remain relevant for detection and prevention. If you visited uphold-en-cdn.created.app or entered any login details, immediately change your Uphold password and enable multi-factor authentication on all financial accounts. Monitor your transaction history for unauthorized activity and report any suspicious behavior to your platform’s support team. Consider revoking access to any connected third-party applications. Users should also verify the authenticity of any communication claiming to be from Uphold by checking the sender’s domain and avoiding links in unsolicited messages.