connect-uphold-login-account[.]blogspot[.]com[.]co

This domain, connect-uphold-login-account.blogspot.com.co, is flagged as a high-risk credential phishing threat. It was created on July 8, 2012, and remains active as of July 12, 2026. The page title, 'How Can You Safely Access Your Uphold Login Account?', directly indicates a phishing attempt targeting Uphold users. Infrastructure analysis reveals the domain resolves to IP 142.250.80.97, located in the US (AS15169 Google LLC), and uses nameservers ns1.google.com, ns2.google.com, ns3.google.com, and ns4.google.com. The SSL certificate is issued by Google Trust Services (WE2), and the site is hosted on Blogger, utilizing technologies including Java, Python, OpenGSE, and HTTP/3. The HTTP status is 302, suggesting redirection. VirusTotal data shows 10 of 95 security vendors flag this domain as malicious, and it appears on one security blocklist, specifically PhishDestroy. The domain is registered through MarkMonitor, Inc. Defenders should treat this domain as an active phishing threat. Immediate actions include blocking the domain at the network level, adding it to email security filters, and monitoring for any related subdomains or IPs (142.250.80.97). Users should be warned not to interact with the site or enter any credentials. The exact content of the phishing page beyond the title has not been analyzed, but the combination of the deceptive title, high vendor detection rate, and credential phishing classification confirms malicious intent. No additional brand or kit details are available in the provided intelligence.