uphold-wallet-io[.]blogspot[.]al

This domain, uphold-wallet-io.blogspot.al, is an active crypto drainer flagged by 12 of 93 security vendors on VirusTotal as of July 12, 2026. It appears on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. The domain resolves to IP 142.250.185.161, located in the United States and hosted on AS15169 (Google LLC). It was created on February 21, 2026, and currently returns an HTTP 302 redirect with a page title of 'Blog not found,' indicating the site may be redirecting visitors to a malicious payload or landing page. The SSL certificate is issued by Google Trust Services (WE2). Detected technologies include Blogger, Java, Python, OpenGSE, and HTTP/3, suggesting a multi-service hosting environment. The domain's nameservers include munnari.oz.au and nsx.nic.al. Defenders should block this domain and its IP at network perimeter and email gateways, monitor for any associated subdomains or redirect chains, and report it to threat intelligence platforms. The exact content of the phishing page has not been analyzed, but the crypto drainer classification indicates it targets cryptocurrency wallet credentials or assets.