uphold-logiiin[.]blogspot[.]pt

The domain uphold‑logiiin.blogspot.pt is currently active and serves a credential‑phishing page titled “Uphold Login | Secure Access to Your Uphold Account”. DNS resolution points to 142.251.140.161, an address owned by Google LLC (AS15169) located in the United States. The site returns an HTTP 302 response and negotiates HTTP/3, indicating modern transport usage. Detected technologies include Blogger hosting, Java, Python, and the OpenGSE library. The TLS certificate is issued by Google Trust Services under the WE2 intermediate, confirming a valid HTTPS connection. VirusTotal scans show ten of ninety‑five AV engines flag the domain as malicious, and the domain appears on the PhishDestroy blocklist as well as one additional public blocklist. The observed indicators confirm a credential‑phishing campaign targeting users of the Uphold service. No further content analysis is available beyond the page title; internal page structure, form fields, or payloads have not been captured. Analysts should block DNS resolution for this hostname, monitor for similar Blogger‑based phishing patterns, and update detection rules to flag the exact page title and HTTP 302 redirect behavior. Continued observation is recommended to capture any evolution of the site or additional hosting changes.