log-in--uphold-home[.]webflow[.]io

This report details a fraudulent website designed to impersonate the legitimate Uphold cryptocurrency platform. While the site presents a default "404 - Page not found" error, its domain and structure indicate it was created for credential theft or phishing attacks against Uphold users. The threat involves harvesting login credentials, potentially leading to unauthorized access to cryptocurrency accounts and financial theft.

Technical analysis confirms the site is malicious. VirusTotal shows 16 out of 95 security vendors flagging this domain as malicious. It is specifically flagged by ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, and ESET. The domain was registered on 2026-02-24 through NameCheap, Inc. It is hosted on IP address 172.64.151.8, located in the United States and assigned to AS13335 Cloudflare, Inc. The SSL certificate is issued by Google Trust Services / WE1. The domain is currently offline.

The current status of this site is DOWN/OFFLINE, rendering it inaccessible. The risk level is assessed as HIGH due to the confirmed malicious detections, the impersonation of a major financial platform, and the very recent creation date. Users who previously visited the site should change their Uphold credentials immediately and enable multi-factor authentication.