ssc-upholdlogin[.]pages[.]dev

This domain is classified as high risk due to its involvement in credential phishing activities. The status of the domain is currently offline, but it was confirmed to be designed for deceiving users into providing sensitive login information, potentially impersonating a legitimate service's login page.

Analysis indicates that ssc-upholdlogin.pages.dev was created on October 30, 2025, and has been flagged by 13 out of 95 security vendors on VirusTotal for phishing activity. The domain is registered through Cloudflare, Inc., and is hosted on the IP address 172.66.44.144, located in the United States, under AS13335 Cloudflare, Inc. Google Safe Browsing has flagged it as phishing, and it is currently present on at least one known security blocklist. The SSL certificate is issued by Google Trust Services / WE1, which may lend an appearance of legitimacy to end users. Despite being offline now, the initial detection and subsequent responses indicate clear malicious intent.

To mitigate the risk posed by such credential phishing domains, users should remain vigilant and verify the authenticity of login pages before entering credentials. Employing browser-based anti-phishing extensions and ensuring that browser phishing protection is enabled can help in early detection. Network administrators should update filter rules regularly to include newly detected threats and employ real-time threat intelligence feeds. Organizations should also conduct training for their users to identify phishing attempts and emphasize the importance of verifying URLs in sensitive communications.