login-uphold-help[.]blogspot[.]rs

The domain login-uphold-help.blogspot.rs has been identified as a credential theft operation specifically targeting Uphold users. This phishing site is currently offline, but its infrastructure remains a concern. The page title 'Uphold Login - Access Your Financial Dashboard' was designed to deceive visitors into entering their Uphold credentials, effectively handing over access to their financial accounts.

Technical analysis reveals that the domain was registered on March 10, 2008, through Webglobe d.o.o., and was resolved to the IP address 172.253.63.132. It was flagged by 10 out of 95 VirusTotal vendors as malicious, and appears on 3 security blocklists. Google Safe Browsing specifically flagged it for phishing. The SSL certificate was issued by Google Trust Services under the WE2 certificate authority. These indicators collectively confirm the domain's malicious intent and the high risk it posed to users.

Given that the domain is now offline, immediate direct access is blocked. However, users should remain vigilant and avoid interacting with any similar URLs. PhishDestroy recommends enabling multi-factor authentication on all Uphold accounts, never clicking on unsolicited links, and reporting any suspicious domains to security teams. Regularly monitor account activity for unauthorized access and keep security software up to date.