home-sso-uphols[.]pages[.]dev

This domain, home-sso-uphols.pages.dev, is flagged as a high-risk credential phishing site hosted on Cloudflare Pages infrastructure. Analysis indicates the domain was registered on February 21, 2026, and is currently offline, returning an HTTP 403 status with a page title explicitly stating 'Suspected phishing site | Cloudflare.' The site resolves to IP 172.66.47.69, associated with Cloudflare, Inc. (AS13335) in the US, and uses Cloudflare nameservers (meadow.ns.cloudflare.com, hugh.ns.cloudflare.com). Google Safe Browsing classifies the domain under social engineering, and it appears on at least one security blocklist. Sixteen of 93 security vendors on VirusTotal have flagged the domain, though the specific detection rules or payloads are not detailed in available intelligence.

The SSL certificate is issued by Google Trust Services (WE1), and the site employs HSTS and HTTP/3, typical of Cloudflare-hosted properties. Gridinsoft assigns a trust score of 0/100, reinforcing its malicious classification. While the domain is currently inaccessible, defenders should treat any prior or future resolutions of this domain as hostile.

Logs containing this domain or its IP should be reviewed for credential submission attempts or unauthorized access. If the domain reappears, defenders are advised to block it at the network level and monitor for related infrastructure, such as new subdomains or IPs under the same ASN. The exact brand or service being impersonated is not specified in available data, limiting targeted detection rules to generic phishing indicators.