en-uphold-login-app[.]blogspot[.]ug

The domain en-uphold-login-app.blogspot.ug is listed as active with a high risk rating and is identified as a credential phishing site. The page title returned from the host is "Uphold Login | Secure Access to Your Crypto & Digital Assets," indicating an attempt to impersonate a legitimate service. HTTP requests receive a 302 redirect response, and the site is currently blocked by the PhishDestroy mitigation system. It appears on one security blocklist and has been flagged by 10 of 93 security vendors on VirusTotal. Technical analysis shows the site is hosted on the Blogger platform and incorporates Java, Python, OpenGSE components, and serves content over HTTP/3. DNS resolution points to IP address 142.251.111.132, which belongs to Google LLC (AS15169) and is located in the United States. The SSL certificate is issued by Google Trust Services under the WE2 designation, confirming the use of a legitimate certificate authority. While the page title and infrastructure details are concrete, the exact payload and user‑facing content have not been publicly disclosed, leaving the full scope of the credential collection mechanism uncertain. Defenders should add the domain to network and email filtering rules, monitor for DNS queries to the associated IP, and educate users to avoid entering credentials on any site presenting this title or domain. Continuous re‑evaluation is advised as threat actors may modify the content or redirect infrastructure.