io-uphold[.]weebly[.]com

The domain io-uphold.weebly.com is presently classified as a generic phishing site and assigned a high risk level. VirusTotal reports that 18 of 91 security vendors have flagged the domain, indicating a notable detection consensus. Google Safe Browsing lists the domain under social engineering, and three independent blocklists also contain the address. Specific blocklist operators that have added the domain include PhishDestroy, MetaMask and SEAL, demonstrating cross‑sector awareness of its malicious use. The domain resolves to the IPv4 address 74.115.51.9, which is hosted on infrastructure served by Amazon Route 53 DNS as evidenced by the four nameservers ns-123.awsdns-15.com, ns-1500.awsdns-59.org, ns-1797.awsdns-32.co.uk and ns-646.awsdns.

Registration information shows the domain was created on 29 March 2006 and is managed through MarkMonitor Inc., a registrar commonly associated with legitimate brand protection services. The age of the domain reduces the likelihood of a newly registered scam, but the long‑standing registration does not preclude compromise or abuse. Available intelligence does not contain a recent HTTP response, SSL certificate details, page title or explicit evidence of the phishing lure, so the precise content and targeted brand remain unverified. This lack of visible payload information creates uncertainty about the exact victim profile and the attack vector employed.

Nonetheless, the convergence of multiple vendor detections, blocklist listings, and Safe Browsing classification provides sufficient actionable confidence for defensive operators. Defenders should immediately block both the hostname and its resolving IP at perimeter and DNS layers, incorporate the domain into threat‑intel feeds, and monitor for any outbound connections to the address. Continuous re‑scanning of the site is advised to capture any changes in content or additional indicators.