Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is network-abuse@google.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
support-uphold-login[.]blogspot[.]co[.]nz
“Blog niet gevonden”
support-uphold-login.blogspot.co.nz — 확인되지 않음. 브랜드 사칭: Uphold; 사기 유형: Credential Phishing. 증거 요약: VirusTotal 11/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); URLQuery 3 alerts; URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); CF Radar malicious; PhishDestroy score 89/100. 등록기관: MarkMonitor.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
This report details a malicious domain, support-uphold-login.blogspot.co.nz, identified as a credential phishing threat. The site displayed a "Blog niet gevonden" (Blog not found) page, suggesting it was configured to impersonate a Uphold login portal to steal user credentials. The primary threat is the theft of sensitive account login information through a fraudulent interface.
Technical analysis confirms the malicious nature of this domain. VirusTotal flagged it with 12 detections out of 95 security vendors. The domain was created on 2026-03-02 and registered through MarkMonitor, Inc. It resolved to IP address 216.58.206.65, hosted in Germany on AS15169 (Google LLC). The site used an SSL certificate issued by Google Trust Services / WE2, and its nameservers were ns1 through ns4.google.com. It was flagged by ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, and CyRadar, and appeared on 3 blocklists.
The domain is currently down or offline, indicating it has been neutralized or is no longer actively serving malicious content. Despite its offline status, the risk level remains high, as indicated by a DOM risk score of 80, due to its confirmed history of credential phishing and the potential for the domain to be reactivated or for similar domains to appear.
네트워크 보안 인텔리전스
위협 대응 Pipeline
공개 차단 목록 상태
사용 기술 · 5 identified
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 분석
보관된 증거
증거 및 외부 보고서
PD-20260302-7222C0 Recipient: network-abuse@google.com 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.