connect-uphold-com-login[.]blogspot[.]com[.]es

This domain connect-uphold-com-login.blogspot.com.es is classified as active with a high risk level under credential phishing. It resolves to IP address 142.250.186.161 and presents an SSL certificate issued by Google Trust Services. VirusTotal reports show 11 out of 95 security vendors flagging the domain, and it appears on one security blocklist with blocking already implemented by PhishDestroy. The recorded page title is No se ha encontrado el blog. Technologies detected on the infrastructure include Blogger, Java, Python, OpenGSE and HTTP/3. These data points establish the domain as operational and tied to the stated threat category at the time of assessment on July 12, 2026.

Analysis indicates that the exact content served by the domain has not been retrieved, leaving the presence of live credential harvesting pages unconfirmed beyond the assigned threat type. The page title suggests the requested resource may not resolve to expected blog content, yet the domain remains listed as active. No registration dates, ASN details or additional hosting metadata are supplied in the available intelligence, so attribution of infrastructure ownership or campaign duration cannot be established from these records alone.

Defenders should treat the domain as blocked based on the existing blocklist entry and vendor detections rather than relying on further manual verification. Network controls can incorporate the IP 142.250.186.161 for monitoring of related traffic, while DNS and proxy layers should enforce the known block status. Ongoing checks against updated blocklists are warranted because the domain status is reported as still active. Any observed connections should be logged for correlation with other high-risk indicators without assuming additional unlisted attributes.