ChainPatrol
Web-Check 
域安全和威胁情报
app-upheld-docs[.]
app-upheld-docs[.]created[.]app
app-upheld-docs.created.app 网络钓鱼与安全检查
“Uphold Login - Secure Digital Asset Platform”
威胁判定
关键
95/100 证据评分
可用性
隐形 · 可达
通过隐形检查观察可达性
风险信号
病毒检测总数：12/91
Spamhaus DBL: DBL_PHISH
存储的阻止列表匹配项：2
品牌冒充：Uphold
最后已知的活跃状态
报告概览
app-upheld-docs.created.app — 隐形 · 可达 (HTTP 404). 品牌冒充：Uphold; 诈骗类型：Credential Phishing. 证据摘要: VT 12/91 (alphaMountain.ai, CyRadar, Emsisoft, Forcepoint ThreatSeeker, Fortinet); URLQuery 0; URLScan malicious; GSB no flag; Spamhaus DBL_PHISH; BL 2 (MetaMask, SEAL); cloaking observed; PD 95/100. 注册商: Name.com.
为保留原始取证记录，下方的 PhishDestroy AI 详细分析仍使用英文。
证据摘要
重要
app-upheld-docs.created.app is a subdomain of created.app. PhishDestroy first observed the hostname on Jun 22, 2026. Stored content metadata identifies Uphold as the apparent target. The captured page title is “Uphold Login - Secure Digital Asset Platform”. Stored page analysis classifies the content as credential phishing. Current evidence score: 95/100 (critical).
Positive findings are stored from 5 sources: VirusTotal, MetaMask, SEAL, Spamhaus DBL, and URLScan. VirusTotal recorded 12 detections among 91 engines: alphaMountain.ai, CyRadar, Emsisoft, Forcepoint ThreatSeeker, Fortinet, Google Safebrowsing, Kaspersky, Lionic, Netcraft, SOCRadar, Sophos, Webroot on Jun 23, 2026 at 02:01 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 22:20 UTC. Spamhaus DBL: DBL_PHISH on Jul 22, 2026 at 22:30 UTC. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Uphold and assigned phishing as its category on Jul 29, 2026 at 03:02 UTC. Non-positive and contextual checks: URLQuery recorded no positive detection on Jun 22, 2026 at 12:52 UTC. Google Safe Browsing returned no flag on Jun 22, 2026 at 13:00 UTC.
Cloaking was recorded with HTTP 404 on Aug 7, 2026 at 01:00 UTC. The cloaking probe recorded content split conditional delivery at 1/100 on Aug 7, 2026 at 01:00 UTC: dead_http: raw=http_404; http=404; via=https_proxy; server=Vercel. Registration records for the registrable domain created.app list Name.com, Inc. as the registrar. At collection time, the hostname resolved to 216.150.1.1 on AS16509 (AMAZON-02 - Amazon.com, Inc., US). The IP and ASN identify shared Vercel edge infrastructure; the origin server is not established by this address. DOM analysis on Jun 22, 2026 at 14:20 UTC returned 95/100. The evidence archive retains 3 visual captures from PhishDestroy, URLScan, and URLQuery. TLS metadata lists Let's Encrypt / R13 as the certificate issuer with validity through Jul 28, 2026; checked Jun 22, 2026 at 13:00 UTC.
The content indicators and 5 positive source findings support the current Uphold-themed credential phishing classification.
数据覆盖范围
VirusTotal
12 / 91
URLQuery
checked — no detections recorded
PhishStats
未检查
OTX
no community references
CF雷达
no data
URLScan capture
存储的报告
URLScan verdict
malicious
DNS 阻断
未检查
TLS
已过期或未验证
WHOIS
not parsed
屏幕截图
3 captures · 3 sources
重定向链
未探查
威胁响应 Pipeline
发现
Checks
Reports
可用性
11/12
Sent Report Recorded
Stored sent-report record for registrar Name.com, Inc., hosting provider, 1 abuse contact
abuse@vercel.com
公共封禁名单状态
已保存的截图
域名情报
域名
URLScan Verdict
恶意
score 100 Phishing brand: Uphold report ↗
服务器 / ASN
Vercel · AS16509 AMAZON-02 - Amazon.com, Inc., US
IP Context
Vercel shared edge
origin IP hidden
Edge-IP 声誉不属于此域。
Registrar (base domain)
Name.com
(SE)
(SE)
IP 地址
216.150.1.1
CDN
地理位置
Walnut, US
Walnut, US网络AS16509 · Amazon.com, Inc.
源 IP 隐藏在 CDN 代理后面。边缘地址的反向 IP 结果包含不相关的租户；查找源头需要被动 DNS 或证书透明数据。
HTTP 状态码404 Not Found
Cloaking
Cloaking Detected
Content split
· score 1/6
dead_http: raw=http_404; http=404; via=https_proxy; server=Vercel
server: Vercel title: Anything - AI app builder
checked 2026年8月7日
技术细节DNS、SSL SAN、时间戳
首次发现2026年6月22日
DOM Analysisanalyzed 2026年6月22日score 95/100
IoC Extractionscanned 2026年7月29日0 wallet · 0 Telegram IoCs
Submitted URLhttp://app-upheld-docs.created.app/
域名服务器ns2.vercel-dns.com
TLS Fingerprint
TLS Observationvalid from 2026年4月30日scanned 2026年6月22日
Case ID
ICANN OVERSIGHT
Registration: created.app
认证和 RAA 背景
认证和 RAA 背景
ICANN 收到了钱。问责却没有到来。
For the registrable domain created.app behind this subdomain, the registrar above operates under an ICANN contract. ICANN collects annual, variable and transaction-based fees tied to registrations, renewals and transfers.
认证：已变现。问责：请稍后再来查看。
接着，魔法开始了：ICANN 写下 RAA §3.18，注册商调查自身客户群体内部的滥用行为，受害者免费提交证据，而每一层都在等待其他人采取行动。如果这能让受害者觉得更安全，那真是太好了——看来账单确实起作用了。
举报此域名
提交证据，帮助保护他人
VirusTotal 分析
12 / 91 安全供应商标记了该域
View on VT
alphaMountain.ai
CyRadar
Emsisoft
Forcepoint ThreatSeeker
Fortinet
Google Safebrowsing
卡巴斯基
Lionic
Netcraft
SOCRadar
Sophos
Webroot
证据与外部报告
证券分析
OSINT与情报分析
DNS 与网络
SEO 与域名
您是否受到本网站的影响？
If credentials were compromised, report immediately. Do not engage with recovery scammers.
如果您输入了帐户凭据、个人或付款信息，或者从此域下载了文件，请立即采取措施。以下资源可帮助您报告事件并保护自己。
PhishDestroy listing review 不是执法报告
域名申诉
如果您拥有该域名并认为该列表不正确，请请求审核
警惕“数据恢复”诈骗！ 犯罪分子可能会冒充调查员、律师或追债员再次联系受害者。 请勿支付预付费用或共享凭证。 了解有关康复欺诈的更多信息 →
相关基础设施与报告
Content matches 4
关于共享 Vercel 边缘的其他报告 6
这些报告解析为相同的共享边缘 IP。它们有助于报告发现，但并不意味着共同所有权或共享源服务器。
ellipalsetup.live 
telepanm.com 同一注册商: Name.com 6
bancodobrasil-parceiros.com 
monacoinsol.com 
surainforseg.com Uphold impersonation 8
These domains also target Uphold users. View all Uphold threats →
en-uphold-login-auth.tem3.io 
uphldd.zapier.app 
sso-auth-uphold-eng.square.site 
最近的威胁报告 4
最近添加了来自 PhishDestroy 数据库的报告。这些发现链接并不意味着共享基础设施或所有权。