connect-uphold-login-account[.]blogspot[.]com[.]ng

This domain, connect-uphold-login-account.blogspot.com.ng, is actively flagged as a high-risk credential phishing site targeting users of the Uphold platform. Infrastructure analysis reveals the domain is hosted on Blogger infrastructure, resolving to IP 142.250.185.193 under AS15169 (Google LLC) with nameservers ns1.google.com and ns2.google.com. The SSL certificate is issued by Google Trust Services, a common characteristic of legitimate and malicious domains leveraging free hosting services. The page title, 'How Can You Safely Access Your Uphold Login Account?', explicitly references Uphold, indicating an attempt to deceive users into submitting login credentials. The domain currently returns an HTTP 302 status, suggesting it may be redirecting visitors to another endpoint or evading detection through transient behavior. Technologies detected include Blogger, Java, Python, and OpenGSE, consistent with Google-hosted environments. The domain appears on at least one security blocklist and is flagged by 8 of 95 vendors in VirusTotal scans, confirming its malicious classification. No evidence of takedown or sinkholing is present as of July 12, 2026. Defenders should treat this domain as an active threat, block it at the DNS or network level, and monitor for related phishing campaigns leveraging similar naming conventions or infrastructure. The exact content of the phishing page remains unanalyzed, but the combination of Uphold branding, credential phishing classification, and Blogger hosting provides sufficient indicators for mitigation.