uphold-loginaccount[.]blogspot[.]nl

Analysis of uphold-loginaccount.blogspot.nl shows it is hosted on Google’s infrastructure (IP 142.250.185.129, SSL issued by Google Trust Services). The domain uses Google public nameservers (ns1‑ns4.google.com) and serves content over HTTP/3 with a 302 redirect. The page title “How Can You Securely Access Your Uphold Login Account?” and the declared scam type “Credential Phishing” indicate the site is attempting to harvest credentials for the Uphold service. The site is built on Blogger and includes Java, Python, and OpenGSE components, consistent with a typical blog‑hosted phishing page. It was registered on 10 January 2003 through MarkMonitor, Inc., and has been flagged by PhishDestroy and listed on one security blocklist. VirusTotal scans show 13 of 95 vendors flag the domain as malicious. The current status is active. While the hosting environment is legitimate, the combination of the deceptive page title, redirect behavior, and vendor detections provides strong evidence of credential‑phishing activity. Defenders should block the domain at the network perimeter, add it to URL filtering lists, and monitor for related traffic to the IP address. Continuous re‑scanning is advised to capture any changes in the payload or hosting configuration.