uphold-logiinnn[.]blogspot[.]com[.]cy

uphold-logiinnn.blogspot.com.cy is currently active and returns an HTTP 302 redirect. The site is hosted on the Blogger platform and serves content over TLS provided by Google Trust Services, indicating use of a legitimate certificate chain. DNS resolution points to the IPv6 address 2a00:1450:4001:827::2001, which is owned by AS15169 Google LLC and geolocated to Germany. The page title returned by the server is “Uphold Login | Secure Access to Your Uphold Account,” matching a credential‑phishing campaign targeting the Uphold brand. The domain appears on one security blocklist and is listed by PhishDestroy as blocked. On VirusTotal, 11 of 95 scanners flagged the domain as malicious, reinforcing the suspicion of phishing activity. Detected technologies include Blogger, Java, Python, OpenGSE, and HTTP/3, suggesting a mixed‑technology stack possibly used to deliver the malicious payload. No additional infrastructure details such as registration dates or registrar information are available from the provided data. The confidence in the phishing classification is high given the explicit page title, blocklist presence, and multiple vendor detections. Defenders should consider adding the domain and its resolving IP address to deny‑list or firewall rules, monitor for related traffic, and educate users about unsolicited login prompts referencing Uphold. Ongoing observation is advised to detect any changes in hosting or content.