sso----m-uphold-app[.]weebly[.]com

The domain sso----m-uphold-app.weebly.com is flagged as an active, high‑risk generic phishing site as of July 29 2026. Infrastructure analysis shows the sub‑domain resolves to IP 74.115.51.8 and is hosted on Weebly’s platform, using four AWS Route 53 nameservers (ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk, ns-646.awsdns). The domain was registered through MarkMonitor, Inc. on 29 March 2006, indicating a long‑standing registration that may have been repurposed for malicious use.

Reputation data is significant: the host appears on three independent security blocklists, Google Safe Browsing classifies it as a social‑engineering threat, and it is explicitly blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal reports that 17 of 91 security vendors flag the domain, reinforcing the malicious assessment. No public page title or SSL certificate details are available in the current intelligence, leaving the exact phishing content and any HTTPS usage uncertain.

Defenders should treat the domain as hostile, enforce DNS‑level denial or sinkholing, incorporate the IP and hostname into network‑based blocklists, and educate users to avoid credential entry on any site presenting a similar URL pattern. Continuous monitoring of the IP address and any new threat‑intel references is recommended to capture potential shifts in hosting or payload delivery.