# upheld-homepage.pages.dev — MALICIOUS

> upheld-homepage.pages.dev is flagged for phishing risks. Avoid interacting with it and ensure your credentials stay secure.

## Summary
PhishDestroy identifies upheld-homepage.pages.dev as a high-risk phishing domain designed to deceive users and collect sensitive information. The domain is associated with social engineering tactics, posing a significant threat to user security and privacy.

This domain was registered on February 21, 2026, through Cloudflare, Inc. It resolves to the IP address 172.66.45.3 and has been flagged by Google Safe Browsing for social engineering. Additionally, the domain appears on multiple security blocklists, and 14 out of 95 VirusTotal security vendors have classified it as suspicious, reinforcing its malicious intent.

Currently, upheld-homepage.pages.dev is offline, likely taken down due to its illicit activities. Users are strongly advised to avoid visiting this domain, refrain from providing any personal information, and maintain updated security software to protect against similar phishing threats.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 172.66.45.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: ["dalary.ns.cloudflare.com", "ian.ns.cloudflare.com"]
- SSL Issuer: Google Trust Services / WE1

## Detection Status
- VirusTotal: 14 vendors flagged
  Vendors: ["ADMINUSLabs", "Criminal IP", "alphaMountain.ai", "BitDefender", "CyRadar", "Forcepoint ThreatSeeker", "Fortinet", "G-Data", "Google Safebrowsing", "Kaspersky", "Lionic", "Sophos", "VIPRE", "Webroot"]
- Google Safe Browsing: FLAGGED
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019a926d-cfe5-729a-b1aa-52d2c8d239b6.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/89c10070-f9f4-408c-b7b0-a358547f8120
- PhishDestroy: https://phishdestroy.io/domain/upheld-homepage.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/upheld-homepage.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/upheld-homepage.pages.dev/
Last updated: 2026-03-19