Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is network-abuse@google.com.
The latest stored availability evidence still shows the domain reachable; 6 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
uphold-wallet-io[.]blogspot[.]co[.]uk
“Blog not found”
uphold-wallet-io.blogspot.co.uk — Belum terverifikasi. Peniruan identitas merek: Uphold; Jenis penipuan: Crypto Scam. Ringkasan bukti: VirusTotal 10/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, Fortinet); URLQuery 2 alerts; URLScan malicious verdict; PhishDestroy score 80/100. Registrar: MarkMonitor.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of the domain uphold-wallet-io.blogspot.co.uk confirms its classification as an active crypto drainer phishing site, targeting cryptocurrency users. The domain, registered on February 21, 2026, through MarkMonitor, Inc., is hosted on Google LLC infrastructure (AS15169) and resolves to the IP address 142.251.140.161, located in the United States. The site is served via Blogger, with detected technologies including Java, Python, OpenGSE, and HTTP/3. Despite the page title displaying 'Blog not found,' the domain returns an HTTP 302 redirect status, a common tactic to obscure malicious intent or facilitate further redirection to fraudulent endpoints.
The domain is flagged by 12 of 93 security vendors on VirusTotal, with three major security blocklists—PhishDestroy, MetaMask, and SEAL—actively blocking it. These detections align with the domain's categorization as a crypto scam, specifically designed to drain victims' cryptocurrency wallets. The use of Google's nameservers (ns1.google.com through ns4.google.com) and a Google Trust Services SSL certificate (WE2) may lend a superficial appearance of legitimacy, but this infrastructure is frequently exploited by threat actors to evade initial suspicion. Defenders should treat this domain as high-risk.
The combination of a 302 redirect, active blocklist presence, and confirmed crypto drainer classification indicates ongoing malicious activity. Network-level blocking is recommended, particularly for organizations handling cryptocurrency transactions or wallet services. While the exact content of the phishing page remains unanalyzed, the available indicators—including the domain name, scam type, and detection data—strongly suggest it is designed to deceive users into interacting with fraudulent wallet interfaces. Monitoring for related domains using similar naming conventions (e.g., 'uphold-wallet' variants) may help identify additional threats in this campaign.
Intelijen Keamanan Jaringan
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 5 identified
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
PD-20260125-91108E Recipient: network-abuse@google.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive