portal-com-uphold-cdn[.]tem3[.]io

Analysis indicates that portal-com-uphold-cdn.tem3.io is an active generic phishing infrastructure. The domain was registered on August 2, 2024 through GoDaddy.com, LLC and is delegated to Cloudflare nameservers (justin.ns.cloudflare.com, val.ns.cloudflare.com). DNS resolution points to the IPv4 address 188.114.96.3, which remains reachable as of the report date. VirusTotal scans have flagged the domain in 10 of 91 security engines, reinforcing the suspicion of malicious use. The high risk rating reflects the combination of recent registration, active hosting, and detection by multiple vendors. Current intelligence does not disclose the specific payload or targeted brand, and no page content has been captured. Defenders should block DNS resolution and HTTP traffic to this fully qualified domain name and to the associated IP address, monitor for any lateral use of the same host, and consider adding the domain to threat‑intel feeds and web‑filter policies. Ongoing observation of the Cloudflare name servers for additional sub‑domains is advised, as the infrastructure may be leveraged for further phishing campaigns.