en-uphold-login-app[.]blogspot[.]com[.]ar

The domain en-uphold-login-app.blogspot.com.ar was registered on February 21, 2026 and currently resolves to IP address 142.251.111.132, which belongs to ASN AS15169 located in the United States. The host presents a valid TLS certificate from a recognized certificate authority and returns an HTTP 302 status code, indicating a redirection flow. The page title returned by the server is "Uphold Login | Secure Access to Your Crypto & Digital Assets," matching the known scam type of credential phishing. Infrastructure analysis shows the domain is served by a blog‑hosting platform using nameservers listed as blogspot.l.googleusercontent.com, confirming that the site leverages a mainstream hosting service. Security telemetry flags the site for social‑engineering activity, and it appears on at least one blocklist, having been blocked by PhishDestroy. VirusTotal scans report 12 of 93 security vendors flagging the domain as malicious. The combination of a recent registration, use of a reputable hosting provider’s IP range, a legitimate‑looking TLS certificate, and active redirection to a credential‑capture page indicates a high‑risk phishing operation. Defenders should add the domain to DNS blocklists, monitor for any related C2 traffic, and enforce strict email filtering for messages that reference the "Uphold" brand. Continuous re‑scanning is recommended to capture any changes in the site’s payload or hosting configuration.