en-us-uphold-login[.]blogspot[.]com[.]ng

This domain is flagged as an active credential phishing site targeting users of a digital wallet service, based on its page title 'Secure Uphold Login Guide | Manage Your Digital Wallet.' Analysis indicates the domain is hosted on Blogger infrastructure, resolving to IP address 192.178.155.132, and is currently listed on one security blocklist. The SSL certificate is issued by Google Trust Services, which aligns with the detected Blogger hosting environment but does not mitigate the phishing risk. Infrastructure analysis reveals the use of Java, Python, and OpenGSE technologies, which are consistent with automated phishing kits or custom-built credential harvesting tools. The domain is registered through MarkMonitor, a legitimate registrar, which may reduce suspicion but does not eliminate the threat. As of July 12, 2026, eight out of ninety-five security vendors on VirusTotal have flagged this domain, providing additional technical evidence of its malicious nature. The exact content and functionality of the site remain unconfirmed, as no direct analysis of the page has been conducted. However, the combination of a deceptive page title, active status, and detection by security tools suggests a high likelihood of credential theft targeting users attempting to access their digital wallet accounts. Defenders should treat this domain as a confirmed phishing threat and prioritize blocking or monitoring access to it. Organizations and security teams are advised to update their blocklists with this domain and its associated IP address. Additional monitoring of related subdomains or similarly named Blogger-hosted sites may be warranted, given the potential for this threat actor to deploy additional phishing pages. No further brand-specific indicators are available at this time, but the page title explicitly references Uphold, indicating the likely target of this campaign.