en-uphold-login-app[.]blogspot[.]pt
“Uphold Login | Secure Access to Your Crypto & Digital Assets”
en-uphold-login-app.blogspot.pt — 未验证. 品牌冒充:Uphold; 诈骗类型:Credential Phishing. 证据摘要: VirusTotal 10/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar, Fortinet); URLScan malicious verdict; Google Safe Browsing flagged; PhishDestroy score 98/100.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This report details a credential phishing threat targeting users of the Uphold cryptocurrency platform. The site, hosted at en-uphold-login-app.blogspot.pt, posed as an official "Uphold Login" page for accessing crypto and digital assets. The threat involved tricking users into entering their login credentials, which would then be stolen by the attacker.
Technical analysis reveals the domain was created on 2006-12-09 and hosted on IP address 142.250.185.225, assigned to AS15169 Google LLC in the United States. The site used an SSL certificate from Google Trust Services (WE2) and its nameservers were ns1 through ns4.google.com. VirusTotal flagged it with 11 out of 95 detections, and Google Safe Browsing marked it for "SOCIAL_ENGINEERING". It was also flagged by alphaMountain.ai, BitDefender, CRDF, CyRadar, and Emsisoft, and appeared on three blocklists.
The site is currently DOWN/OFFLINE. The risk to users is considered high due to the confirmed phishing activity and multiple security vendor detections, though the immediate threat is mitigated by the site being offline.
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 5 identified
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
存档证据
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。