home-uphdll-en[.]pages[.]dev

The domain home-uphdll-en.pages.dev is currently active and hosted behind Cloudflare (nameservers aaden.ns.cloudflare.com, alexandra.ns.cloudflare.com). DNS resolution points to IP 188.114.97.3, which belongs to AS13335 Cloudflare, United States. The site presents the page title “Login to Uphold – Manage Your Crypto, Metals & Fiat in One Wallet”, indicating a brand‑impersonation attempt targeting Uphold users. The SSL certificate is issued by Google Trust Services (WE1), which is typical for Cloudflare‑proxied sites and does not guarantee legitimacy. Security telemetry shows 10 of 95 VirusTotal vendors flag the domain, Gridinsoft assigns a trust score of 0/100, and the domain appears on one external blocklist. PhishDestroy has already blocked it. Technical headers reveal HSTS, HTTP/3, and Cloudflare services, consistent with a fast‑moving phishing infrastructure. The HTTP response code is 500, suggesting the backend is currently misconfigured or intentionally returning an error, limiting direct content analysis. The domain was registered on 30 Oct 2025, less than a year old, and the page title aligns with a crypto‑scam classification. Defenders should treat the domain as high‑risk, add it to deny‑lists, monitor DNS queries for the domain and its IP, and enforce strict outbound filtering for any connections to this host. Because the live page cannot be retrieved, further forensic capture of the page content is recommended if the site becomes reachable.