uphold-login-accountt[.]blogspot[.]hu

uphold-login-accountt.blogspot.hu is currently active and hosts a credential phishing site as indicated by the page title “Uphold Login Account | Secure Access”. HTTP requests receive a 302 redirect, and the domain resolves to the IPv6 address 2a00:1450:4001:810::2001, which belongs to AS15169 Google LLC and is geolocated in Germany. The TLS certificate is issued by Google Trust Services under the WE2 label, confirming the use of Google’s certificate infrastructure. Service fingerprinting reveals the presence of Blogger, Java, Python, OpenGSE, and HTTP/3, consistent with a typical blog‑hosted phishing deployment. Twelve of ninety‑five VirusTotal scanners have flagged the domain, and it is listed on a single security blocklist, with PhishDestroy confirming the block. The infrastructure analysis shows no additional hosting or command‑and‑control components beyond the identified Google‑hosted endpoint. While the exact content of the login page has not been examined, the combination of the deceptive title, redirect behavior, and vendor detections strongly supports a credential‑phishing classification. Defenders should add the domain to network deny lists, monitor DNS queries for the IPv6 address, and consider sinkholing the host to disrupt traffic. End‑users should be warned that any request to this URL is malicious and must be avoided.