en-uphold-login-app[.]blogspot[.]se

This domain, en-uphold-login-app.blogspot.se, presented a credential phishing threat by impersonating the Uphold brand. The page title, "Uphold Login | Secure Access to Your Crypto & Digital Assets," indicates the site was designed to mimic a legitimate login portal for Uphold, a cryptocurrency platform. The threat posed is the theft of user credentials, specifically targeting individuals seeking access to their crypto and digital asset accounts.

Technical evidence confirms the malicious nature of the site. VirusTotal recorded 9 detections out of 95 security vendors. Google Safe Browsing flagged the domain for "SOCIAL_ENGINEERING." The domain was registered through MarkMonitor, Inc. and was created on 2005-08-26. It resolved to IP address 142.250.195.97, located in the United States and belonging to AS15169 Google LLC. The SSL certificate was issued by Google Trust Services / WE2. The domain used nameservers ns1.google.com through ns4.google.com.

The current status of the site is DOWN/OFFLINE, meaning it is no longer accessible. The risk level is assessed as high based on the confirmed phishing activity, the specific impersonation of a financial services brand, and the active security vendor flagging. While offline, the threat of similar phishing attempts remains for users seeking Uphold login pages.