home-uphld-logii[.]pages[.]dev

This domain, home-uphld-logii.pages.dev, is flagged as a high-risk credential harvesting phishing site designed to mimic legitimate authentication portals. Analysis indicates the infrastructure was engineered to capture user credentials, likely targeting corporate or financial service logins. No specific brand impersonation or drainer kit signatures were identified, but the domain exhibits classic phishing traits such as obfuscated hosting and rapid takedown evasion tactics. Infrastructure analysis reveals the domain was registered on October 28, 2025, through a privacy-focused registrar and resolves to the IP address 172.66.47.102, hosted on a content delivery network. The domain is flagged by Google Safe Browsing as phishing and appears on one security blocklist. VirusTotal reports 11 out of 95 security vendors detecting malicious activity, with the SSL certificate issued by a trusted provider (Google Trust Services / WE1), a common tactic to evade initial user suspicion. The domain is currently offline, likely following automated or manual takedown procedures. However, residual risk remains due to potential re-deployment under a new subdomain or altered infrastructure. Users who interacted with the site should immediately rotate credentials, enable multi-factor authentication, and monitor accounts for unauthorized activity. Organizations are advised to block the domain and its associated IP at the network perimeter and conduct internal awareness training to prevent similar threats.