en-uphold-login-app[.]blogspot[.]co[.]nz

This site, en-uphold-login-app.blogspot.co.nz, impersonated the Uphold cryptocurrency platform to conduct credential phishing. The page title, "Uphold Login | Secure Access to Your Crypto & Digital Assets," was used to deceive users into entering login credentials, posing a direct threat of account compromise and asset theft.

Technical analysis confirms the malicious nature of the site. VirusTotal reported 10 detections out of 95 security vendors. Google Safe Browsing flagged the site for "SOCIAL_ENGINEERING." It was blocked by alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, and Fortinet, and appeared on 3 blocklists. The domain was registered through MarkMonitor, Inc. and created on 2005-09-07. It resolved to IP address 2404:6800:4003:c00::84, hosted by AS15169 Google LLC in Singapore. SSL certificate was issued by Google Trust Services (WE2), and nameservers were ns1 through ns4.google.com.

As of the report, the site is offline. Based on confirmed phishing activity and vendor detections, the risk level is high for users who may have encountered the site while active. No further action is required for the offline domain.