uphold-logiinnn[.]blogspot[.]no

This report analyzes the domain uphold-logiinnn.blogspot.no, identified as a credential phishing threat. The site's page title, "Uphold Login | Secure Access to Your Uphold Account," directly impersonates the legitimate Uphold financial platform. The threat posed is credential theft, where users are deceived into entering their account login details on a fraudulent page, potentially leading to account compromise and financial loss.

Technical analysis reveals the site was flagged by 11 out of 95 VirusTotal vendors. It is registered through MarkMonitor, Inc. and was created on 2013-04-09. The domain resolves to IP address 142.250.186.65, located in Germany, assigned to AS15169 Google LLC. The site uses an SSL certificate issued by Google Trust Services (WE2). Its nameservers are ns1.google.com, ns2.google.com, ns3.google.com, and ns4.google.com. The site is currently on one blocklist.

As of this report, the domain is offline/down. The risk level is considered high due to the direct brand impersonation of Uphold and the confirmed credential phishing classification, though the immediate threat is mitigated by the site's current inactive status. Organizations using Uphold should monitor for related or future phishing domains.