uphold-logiinnn[.]blogspot[.]hr

This domain, uphold-logiinnn.blogspot.hr, is currently listed as an active generic phishing infrastructure. The site returns an HTTP 302 redirect and presents the page title “Det gick inte att hitta bloggen”. It appears on one security blocklist and has been flagged by 14 of 95 VirusTotal scanners, indicating a high confidence of malicious intent. Network analysis shows the domain resolves to IP 142.250.186.65, which belongs to Google LLC and is geolocated in Germany. The host is served over TLS with a certificate issued by Google Trust Services under the WE2 designation, confirming the use of legitimate‑looking encryption. Detected web technologies include Blogger, Java, Python, OpenGSE, and support for HTTP/3. The combination of a redirect response, the presence of a generic “blog not found” title, and the association with known phishing blocklists suggests the site is being leveraged to host malicious URLs or to redirect victims to credential‑harvesting pages. The exact payload or credential‑capture mechanism has not been publicly disclosed, and the internal page content remains unverified. Given the high risk rating and the active status, defenders should ensure that network filtering solutions block resolve attempts to uphold‑logiinnn.blogspot.hr and any associated IP address. Continuous monitoring of DNS queries and TLS certificate fingerprints is recommended, as well as updating intrusion‑prevention signatures to reflect the observed redirection pattern. Incident response teams should treat any traffic to this domain as malicious and investigate potential compromise of affected users.