app-uphold-cdn-oauth[.]pages[.]dev

This domain, app-uphold-cdn-oauth.pages.dev, is a malicious phishing site that impersonates Uphold, a legitimate financial platform. It attempts to steal login credentials and sensitive financial information from unsuspecting users by presenting a fake authentication page. The site was designed to trick victims into believing they are accessing a secure Uphold service, when in reality it is a threat crafted to harvest personal data for fraudulent use.

PhishDestroy's analysis reveals that the domain was created on November 4, 2025, and registered through Cloudflare, Inc., with the IP address 188.114.97.3 and an SSL certificate issued by Google Trust Services. VirusTotal data shows that 16 out of 95 security vendors flagged this domain as malicious, and it is listed on one security blocklist. Google Safe Browsing also flags it for phishing. The page title, "Suspected phishing site | Cloudflare," indicates that the hosting provider intervened, and the site is currently offline.

If you visited this domain and entered any personal information, immediately change your Uphold password and enable two-factor authentication on your account. Contact Uphold support to report the incident and monitor your financial accounts for unauthorized activity. Run a full antivirus scan on your device and consider placing a fraud alert on your credit file. Stay vigilant against suspicious emails or messages that may attempt to trick you into visiting similar fraudulent sites.