uphold-com-logiin[.]blogspot[.]com

The domain uphold-com-logiin.blogspot.com is currently classified as a high‑risk generic phishing infrastructure and remains active as of the report date, July 22, 2026. Intelligence indicates that the domain is listed on three independent security blocklists, confirming its presence on known malicious repositories. DNS resolution points to the IP address 142.251.127.132, which is hosted by Google LLC, the same entity that serves as the registrar for the domain. No authoritative nameserver records were returned, as indicated by the NS_NOT_FOUND entry, suggesting that standard DNS queries do not retrieve a conventional nameserver set for this host.

VirusTotal analysis shows that the domain has been examined by 95 scanning vendors; at the time of assessment none of these vendors reported a detection. Although the absence of detections does not constitute validation of safety, it does highlight a potential gap in current signature coverage. The domain is actively blocked by PhishDestroy, MetaMask, and SEAL, reflecting integration of multiple defensive platforms.

Given the combination of blocklist presence, confirmed IP resolution, and the lack of a functional nameserver record, the domain should be treated as malicious. Defensive operators are advised to continue to block traffic to this hostname, update perimeter filters to include its resolved IP, and monitor related network indicators for any lateral movement. Additional investigation, such as active probing of the web service and collection of HTTP response headers, would be valuable to enrich the threat profile, but the current evidence already supports a high‑confidence recommendation to deny any user‑initiated connections to uphold-com-logiin.blogspot.com.