portal-uphld-en-us-web[.]typedream[.]app

The domain portal-uphld-en-us-web.typedream.app is a confirmed brand impersonation site targeting the digital wallet service Uphold. Analysis indicates that the threat actors are using this domain to deceive users into providing their login credentials, potentially leading to unauthorized access and financial loss.

Exact technical indicators include a VirusTotal score of 18/95, indicating a significant portion of security vendors identify this domain as malicious. The domain is registered through Cloudflare, Inc., and resolves to the IP address 172.67.206.36, located in the United States and operated by Cloudflare, Inc. (AS13335). The SSL certificate is issued by Google Trust Services / WE1, which may lend false legitimacy to the site. The domain appears on two security blocklists, PhishDestroy and PhishingDB, further confirming its malicious nature. However, the creation date and Google Safe Browsing (GSB) status are not provided.

The current status of the domain is offline, suggesting that it has been taken down or is no longer actively hosting malicious content. Despite this, the domain remains a potential risk as it could be reactivated at any time. Security teams and organizations are advised to monitor for any signs of the domain becoming active again. Users should be educated to verify the authenticity of login pages and to always check the URL and SSL certificate details before entering any sensitive information.