uphold-walleett[.]blogspot[.]hu

Analysis of the domain uphold-walleett.blogspot.hu indicates active cryptocurrency phishing infrastructure targeting users of the Uphold wallet service. The domain, hosted on Blogger infrastructure, resolves to 142.250.186.65 (AS15169, Google LLC) in Germany and presents a page titled 'Uphold Review 2025: Is This Wallet the Right Choice?'—a title suggesting an impersonation of Uphold, a legitimate cryptocurrency platform. The site returns an HTTP 302 redirect status, which may indicate an intermediate step in a multi-stage phishing chain. Technical indicators include a Google Trust Services SSL certificate (WE2) and detection by 12 of 95 security vendors, confirming malicious classification. The domain appears on one security blocklist and is flagged for cryptocurrency-related fraud. Technologies detected include Java, Python, and OpenGSE, consistent with automated phishing frameworks. While the exact content and functionality of the site remain unconfirmed, the combination of branding in the page title, scam type classification, and infrastructure analysis strongly suggests an attempt to harvest cryptocurrency wallet credentials or distribute fraudulent wallet software. Defenders should prioritize blocking the domain and associated IP, monitoring for related Blogger-hosted phishing pages, and alerting users to verify Uphold communications through official channels only. The domain remains active as of July 12, 2026.