cuevana3-fv8i[.]pages[.]dev

The domain cuevana3-fv8i.pages.dev is a phishing site that engages in brand impersonation, specifically targeting UPS. The site poses an elevated risk and was observed to be taken offline. The page title 'Usamos Cuevana3 para pelis gratis Ve el resultado' suggests that the site might have been used to lure visitors under the guise of offering free movies, while actually attempting to steal sensitive information.

The domain cuevana3-fv8i.pages.dev was registered through Cloudflare, Inc. on August 16, 2025. It resolves to the IP address 104.21.112.1, located in the United States and operated by AS13335 Cloudflare, Inc. The SSL certificate is issued by SSL Corporation / Cloudflare TLS Issuing ECC CA 3. According to VirusTotal, 1 of 95 security vendors flagged this domain as malicious, and it appears on 1 security blocklist, specifically PhishDestroy. The HTTP status code is 403, indicating that the server is refusing to respond to requests.

To protect against this type of brand impersonation phishing, users should change their UPS account passwords immediately and enable two-factor authentication. Any suspicious activity should be reported to UPS and the relevant authorities. Additionally, users can report the domain to PhishDestroy or other security blocklists to help prevent further spread of the scam. If any sensitive information was compromised, users should monitor their accounts for unauthorized transactions and report any fraud to their financial institutions.