login-uphold-help[.]blogspot[.]co[.]ke
“Uphold Login - Access Your Financial Dashboard”
login-uphold-help.blogspot.co.ke — 未验证. 品牌冒充:Uphold; 诈骗类型:Credential Phishing. 证据摘要: VirusTotal 9/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, Forcepoint ThreatSeeker); URLScan malicious verdict; PhishDestroy score 77/100. 注册商: Afriregister.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This site, login-uphold-help.blogspot.co.ke, was a credential phishing threat. It impersonated the Uphold financial platform with a page title of "Uphold Login - Access Your Financial Dashboard." The threat it posed was the theft of user login credentials by deceiving victims into entering their sensitive information on a fraudulent login page.
Technical evidence shows the site was flagged by 11 out of 95 VirusTotal vendors, including alphaMountain.ai, BitDefender, CRDF, CyRadar, and Emsisoft, and appeared on 3 blocklists. The domain was registered with Afriregister Limited on 2011-08-20, hosted on IP address 216.58.206.33 in Germany under AS15169 Google LLC, and used an SSL certificate from Google Trust Services / WE2. Its nameservers were ns1.google.com, ns2.google.com, ns3.google.com, and ns4.google.com.
As of the report, the site is DOWN/OFFLINE, rendering it inactive. The risk level is low for current users, but the domain remains a historical threat indicator for credential phishing campaigns targeting Uphold users.
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 5 identified
Third major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
存档证据
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。