auth-uphold-log-sso[.]weebly[.]com

auth-uphold-log-sso.weebly.com is currently classified as a high‑risk generic phishing platform and remains active. VirusTotal records show that 18 of 91 scanned security vendors flag the domain, indicating a consensus of malicious intent. The domain is listed on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its reputation. Google Safe Browsing marks the site as a social‑engineering threat, which aligns with the phishing designation.

The domain was registered through MarkMonitor Inc. on March 29 2006, and its authoritative name servers are ns‑123.awsdns‑15.com, ns‑1500.awsdns‑59.org, ns‑1797.awsdns‑32.co.uk, and ns‑646.awsdns, suggesting reliance on Amazon Web Services infrastructure. DNS resolution points to the IPv4 address 74.115.51.9. No publicly available SSL certificate details, HTTP status codes, or page‑title information have been disclosed, leaving the exact content of the landing page unverified.

However, the combination of multi‑vendor detections, blocklist presence, and Safe Browsing classification provides sufficient evidence for defensive action. Organizations should add the domain and its resolving IP to outbound filtering rules, ensure internal DNS resolvers block queries to the listed name servers, and monitor for any related sub‑domain registrations that use the same name‑server set. Continuous re‑scanning on VirusTotal and periodic checks of Google Safe Browsing are recommended to capture possible changes in the threat posture.