web[.]idnuphold[.]cc

The domain web.idnuphold.cc is currently identified as a potential source of generic phishing and is marked as active. The domain appears to be impersonating the well-known digital wallet service, Uphold. This assessment is based on the domain's usage of a misleading title, 'uphold idn', which may trick users into believing they are interacting with a legitimate Uphold service.

Infrastructure analysis reveals that web.idnuphold.cc resolves to the IP address 104.21.72.71 and is secured with an SSL certificate from Let's Encrypt, which is a common practice among both legitimate and fraudulent websites. The domain was registered through GoDaddy.com, LLC on March 12, 2026, and has been flagged by 9 out of 95 security vendors on VirusTotal, indicating a moderate level of suspicion among the security community. Additionally, the domain appears on 3 security blocklists, further suggesting its involvement in malicious activities. The creation date and the relatively low number of security vendors flagging the domain may indicate a recent or emerging threat.

Given the current status of the domain as active and the elevated risk level, it is recommended that users avoid interacting with web.idnuphold.cc. Organizations should consider blocking this domain at the network level to prevent potential phishing attacks. Further monitoring and analysis of the domain's activities are advised to stay updated on any changes in threat level or behavior. Security teams should also educate users on the importance of verifying the authenticity of digital wallet services and looking for official communication channels.