upholddlogin[.]blogspot[.]pe

The domain upholddlogin.blogspot.pe has been identified as a high-risk credential phishing threat specifically targeting users of the Uphold financial platform. This deceptive site was designed to mimic the legitimate Uphold login page, as evidenced by its page title 'Uphold | Login', in an attempt to steal user credentials. The domain is currently offline, but its prior activity posed a significant risk to unsuspecting victims.

Technical analysis reveals that upholddlogin.blogspot.pe was created on February 21, 2026, and registered through MarkMonitor, Inc. It resolves to IP address 142.251.141.129 and holds an SSL certificate issued by Google Trust Services (WE2). VirusTotal flagged the domain with a score of 10/95, indicating that 10 security vendors detected malicious activity. Additionally, the domain appears on 3 security blocklists and was flagged by Google Safe Browsing as a phishing site, confirming its malicious intent.

As of the latest assessment, the domain has been taken offline, mitigating immediate risk. However, users who may have interacted with the site should change their Uphold passwords and enable two-factor authentication immediately. PhishDestroy recommends monitoring accounts for any unauthorized activity and reporting any suspicious login attempts to Uphold support. Continued vigilance is advised as similar phishing campaigns may emerge.