uphold-logii[.]weebly[.]com

This domain, uphold-logii.weebly.com, poses a high-risk threat through brand impersonation targeting Google. The site mimics legitimate Google services, likely to deceive users into divulging credentials or sensitive information under false pretenses. The page title, 'Uphold: Buy,' further suggests an attempt to exploit trust in cryptocurrency or financial platforms, potentially leading to unauthorized account access or financial loss. Analysis indicates the domain was registered on May 25, 2026, through MarkMonitor, Inc., a registrar commonly used for both legitimate and malicious purposes. VirusTotal detection rates show 11 out of 95 security vendors flagging the domain as malicious, while infrastructure analysis reveals it resolves to the IP address 74.115.51.9. The domain appears on three security blocklists and is actively blocked by MetaMask, PhishDestroy, and SEAL. Additional technical indicators include the use of a Let's Encrypt SSL certificate and backend technologies such as Weebly, MySQL, PHP, Amazon Web Services, jQuery, Google Analytics, and Cloudflare. Users who visited this domain should immediately revoke any sessions or credentials entered on the site. Monitor associated accounts for unauthorized activity, particularly those linked to Google services or financial platforms. If cryptocurrency transactions were initiated, verify wallet addresses and consider reporting the incident to relevant financial authorities. The domain is currently offline, but affected users should remain vigilant for follow-up phishing attempts via email or other channels.