upholdcustomerservice[.]weebly[.]com

Analysis of upholdcustomerservice.weebly.com shows a high‑risk, active phishing infrastructure. The domain was created on March 29, 2006 and is registered through MarkMonitor, Inc. It resolves to the IPv4 address 74.115.51.8 and is served by four Amazon Route 53 nameservers (ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, ns-646.awsdns). The site appears on three public security blocklists and has been explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering engines.

Google Safe Browsing classifies the domain as a social‑engineering threat, and VirusTotal reports that 19 of 91 scanned security vendors flag the domain as malicious. These converging indicators confirm the presence of a phishing payload targeting users. While the exact page content, SSL certificate details, and HTTP response codes have not been disclosed in the current intelligence set, the combination of blocklist presence, vendor detections, and Safe Browsing classification provides sufficient confidence to treat the domain as a confirmed phishing source.

Defenders should enforce network‑level deny rules for the IP 74.115.51.8, add the domain to internal blocklists, and monitor for any outbound connections to the listed nameservers. Continuous re‑evaluation is advised in case additional payload or hosting changes are observed.