home-uphold-io[.]pages[.]dev

This domain, home-uphold-io.pages.dev, was registered on February 21, 2026 through Cloudflare, Inc. and is hosted on Cloudflare’s network (AS13335) with the IP address 172.66.47.158 located in the United States. The authoritative nameservers dion.ns.cloudflare.com and nancy.ns.cloudflare.com resolve the domain to the Cloudflare edge, and the site presents an SSL certificate issued by Google Trust Services under the WE1 label, indicating a valid TLS configuration. HTTP requests return a 403 status code and the page title reported by the scanner is “Suspected phishing site | Cloudflare”, which aligns with the classification of credential phishing. The service advertises HSTS and HTTP/3, confirming modern security features typical of Cloudflare‑protected sites.

VirusTotal analysis shows that 12 of 95 security vendors have flagged the domain, and it appears on a single public blocklist, where PhishDestroy has already listed it as malicious. The Gridinsoft trust score of 0 out of 100 further reinforces the malicious assessment. No additional intelligence such as Safe Browsing or OTX references is provided, leaving the broader threat actor infrastructure unconfirmed.

Defenders should block traffic to the domain and its associated IP, update intrusion detection signatures with the observed host header and certificate details, and monitor for any outbound connections that may attempt to reach the Cloudflare edge node. Because the site is currently offline (status offline) and returns HTTP 403, future re‑activation is possible; continuous re‑resolution of the domain and periodic re‑scanning are recommended. Organizations that enforce strict outbound DNS filtering should include the domain in their deny lists, and security teams should correlate any credential‑theft alerts with the observed indicators to reduce exposure.