uphold-login-en[.]blogspot[.]co[.]ke

The domain uphold-login-en.blogspot.co.ke poses as a login page for Uphold, a digital wallet and payment platform. With a VirusTotal score of 14/95, it indicates significant malicious activity. The domain's similarity to the official Uphold site makes it potentially dangerous for users seeking to access their accounts. The domain's trustworthiness is further reinforced by its detection on multiple blocklists, highlighting its purpose as a phishing attempt.

Registered through Afriregister Limited, this domain has been active for approximately 14.5 years, suggesting a long-standing presence in the threat landscape. Its IP address, 142.250.186.161, is associated with shared hosting, which is often utilized by malicious actors to evade detection. Despite its age, the domain's suspicious nature is further confirmed by its presence on three blocklists.

Currently, the domain is live, and PhishDestroy has taken proactive measures by monitoring it closely and reporting its malicious activities. Ongoing surveillance is essential to mitigate risks associated with its continued operation, as it attempts to deceive individuals into submitting sensitive login information.