access-uphold--us[.]pages[.]dev

This domain, access-uphold--us.pages.dev, is flagged as a high-risk credential phishing site. The domain was registered through Cloudflare, Inc. on February 21, 2026, and has been taken offline as of the report date, July 24, 2026. The page title indicates that it was suspected to be a phishing site, as per Cloudflare's alert. The domain has a very low trust score of 1/100 according to ScamAdviser and 0/100 from Gridinsoft, suggesting a high likelihood of malicious intent. Google Safe Browsing has flagged the domain for social engineering, which further corroborates the phishing classification.

The domain resolves to the IP address 172.66.45.32, which is located in the United States and is associated with AS13335 Cloudflare, Inc. The site is also blocked by PhishDestroy, indicating that it has been identified and mitigated by security defenses. Infrastructure analysis reveals that the domain uses HSTS, Cloudflare, and HTTP/3 technologies, which can be common in legitimate sites but are also employed by malicious actors to enhance the credibility of their phishing operations. The SSL certificate is issued by Google Trust Services, which might be used to create a false sense of security. The HTTP status code 403 indicates that the domain is currently inaccessible, likely due to the takedown efforts.

Despite the domain being offline, defenders should remain vigilant and ensure that users are aware of the potential threat. They should also monitor for any new registrations or similar domains that may emerge. Defenders should configure their security systems to block this domain and educate users on recognizing and reporting phishing attempts. The exact content of the phishing site has not yet been analyzed, but the combination of the page title and multiple flagging sources strongly suggests a credential phishing operation targeting users of the Uphold service.