page-up-huld-io-cdn[.]created[.]app

Analysis indicates that the domain page-up-huld-io-cdn.created.app is presently active and resolves to the IPv4 address 216.150.16.1. Registration information shows the domain was created through the service “Created App”, and the registrar details are not disclosed beyond that. The domain appears on a single security blocklist and has been flagged by the PhishDestroy vendor as a phishing source. No nameserver records are returned, suggesting either deliberate obfuscation or a misconfiguration that could impede typical DNS resolution checks.

The lack of publicly visible SSL/TLS certificate data, HTTP response codes, or page title prevents a deeper content‑based assessment at this time. The infrastructure footprint is limited to the single IP address, and no additional hosting or ASN data is provided. Defenders should treat the domain as malicious based on the existing vendor detection and blocklist entry.

Immediate mitigation steps include adding the domain and its resolved IP to outbound and inbound firewall deny lists, updating DNS sinkhole configurations, and ensuring that any email filtering solutions incorporate the blocklist entry. Continuous monitoring is recommended to detect any future changes such as the appearance of nameserver records, additional blocklist listings, or the emergence of SSL certificates that could indicate a shift in operational tactics. Until further evidence is gathered, the domain should be regarded as a confirmed phishing vector and blocked across corporate network per standard threat‑containment procedures.