app-uphold-login[.]blogspot[.]com[.]es

Analysis indicates the domain app-uphold-login.blogspot.com.es remains active as of the report date with a high risk classification tied directly to credential phishing. It resolves to IP address 142.250.186.161 and carries the page title Uphold Login | Secure Digital Access. VirusTotal detection stands at 11 out of 95 vendors while the domain appears on one security blocklist. The SSL certificate originates from Google Trust Services and infrastructure components include Blogger, Java, Python, OpenGSE along with HTTP/3 support. Status checks confirm the resource stays reachable without interruption.
The credential phishing classification aligns with the observed page title and threat type designation. No registration dates or additional ASN details appear in available records. Infrastructure analysis reveals the use of standard Blogger hosting combined with multiple backend technologies that do not contradict the phishing label. The single blocklist entry from PhishDestroy provides an independent confirmation of malicious intent without requiring further external validation.
Uncertainties persist around the precise payload delivered to visitors since direct content inspection falls outside the collected intelligence. Exact visitor redirection paths or subsequent credential handling mechanisms remain undocumented in the current data set. Continued monitoring of the IP 142.250.186.161 offers one avenue to detect any infrastructure shifts while the domain maintains its active state.
Defenders should incorporate the domain into existing block policies given its confirmed high risk designation and VirusTotal score. Regular queries against the listed blocklist and VirusTotal feed enable timely updates if detection counts rise. Network monitoring focused on connections to 142.250.186.161 paired with HTTP/3 traffic patterns can surface related activity for rapid response.