Notification and current-status evidence
The sent-report ledger records the first outgoing report at . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
upholddlogin[.]blogspot[.]ch
“Uphold | Login”
Gespeicherte Beobachtung
Beobachteter Titelkontrast
Zusammenfassung der Beweislage
This domain, upholddlogin.blogspot.ch, was registered through Google LLC on 21 February 2026 and is hosted on the Google infrastructure (IP 216.58.206.33, AS15169, Germany). The site returns an HTTP 302 redirect and presents the page title “Uphold | Login”. TLS is provided by Google Trust Services under the WE2 certificate, indicating a valid HTTPS endpoint. Automated analysis detected a mix of web technologies including Blogger, Java, Python, OpenGSE, Clipboard.js and support for HTTP/3, consistent with a typical content‑management platform rather than a custom phishing kit.
Google Safe Browsing classifies the URL as social engineering, and the domain appears on three independent blocklists. It is currently blocked by PhishDestroy, MetaMask and SEAL. VirusTotal reports that twelve of ninety‑five scanning engines have flagged the domain, and Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious assessment. The risk rating is high and the status is listed as active.
Evidence confirms the domain is being used for credential phishing targeting users of the Uphold service, although the exact phishing page content has not been inspected. No further indicators such as malicious payloads or command‑and‑control endpoints have been observed. Defenders should block the domain at the DNS and proxy layers, enforce TLS inspection to capture the redirect, and monitor for login attempts to Uphold that originate from this host. Continuous re‑evaluation is advised, as changes to the page content or additional detections could alter the threat posture.
Momentaufnahme der übermittelten Beweise
- Gesendet
- Protokolleinträge
- 1
- Fall-ID
PD-20260219-55464B- PDF-Artefakt
- PDF-Beweis
Rechtsgrundlage
Vollständiger Beweistext
Section 3.1 of the AUP: The domain upholddlogin.blogspot.ch is actively engaging in phishing activities, which is a direct violation of your Acceptable Use Policy prohibiting illegal activities and fraud.
Section 5.2 of the TOS: The continued operation of this domain constitutes a violation of your Terms of Service, which reserves the right to suspend or terminate services for any activities that involve deception or fraud.
Applicable Laws (Unknown):
Computer Fraud and Abuse Act (CFAA): This U.S. law prohibits unauthorized access to computers and networks, and phishing activities fall under its scope.
Wire Fraud Statute (18 U.S.C. § 1343): This law criminalizes schemes to defraud individuals or entities using electronic communications, which is applicable to the phishing activities associated with this domain.
CAN-SPAM Act (15 U.S.C. § 7701): This act regulates commercial email and prohibits deceptive practices, including phishing, which this domain is clearly violating.
Regulatory Note: Failure to take immediate action against this phishing domain may expose your organization to legal liability and regulatory scrutiny. It is imperative to comply with your own policies and applicable laws to mitigate risks associated with domain abuse.
Data Coverage
Erkenntnisse zur Netzwerksicherheit
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Blocklistenabdeckung
10 überwachte externe Feeds · gespeicherter Stand 11.08.2026
8 überwachte externe Feeds Kein Treffer
Erkennungszeitleiste
-
VirusTotal
12 → 14
VirusTotal-Analyse
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of upholddlogin.blogspot.ch · checked Mar 2, 2026
Wurden Sie von dieser Website betroffen?
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.
Jede beliebige Domain prüfen
Bedrohungsanalyse anhand gespeicherter Blocklisten, WHOIS, DNS und öffentlicher Scan-Beweise
Jetzt scannenPhishing melden
Melden Sie verdächtige Domains an unsere Bedrohungsdatenbank – schützen Sie die Community
MeldenEchtzeit-Bedrohungsfeed
Aktuelle Phishing-Meldungen und beobachtete Verfügbarkeitsänderungen
ÜberwachenBleiben Sie auf dem Laufenden, bleiben Sie sicher
Beobachten Sie aktuelle Bedrohungen oder legen Sie Widerspruch gegen diesen Eintrag ein, wenn Sie der Meinung sind, dass es sich um einen Fehlalarm handelt