meta-uphld-io[.]pages[.]dev

The domain meta-uphld-io.pages.dev was created on February 21, 2026 and is currently taken offline, returning an HTTP 403 response. Its authoritative nameservers are decker.ns.cloudflare.com and evangeline.ns.cloudflare.com, indicating that Cloudflare, Inc. is both the registrar and the hosting provider. The site resolves to IP address 172.66.47.18, which belongs to AS13335, a Cloudflare network located in the United States. The TLS certificate presented is issued by Google Trust Services under the WE1 authority, confirming that HTTPS is enforced via HSTS and the site supports HTTP/3.

Reputation metrics are extremely low: Gridinsoft assigns a trust score of 0 out of 100, while Scamadviser rates the domain at 1 out of 100. The page title returned by the server is "Suspected phishing site | Cloudflare," and the site is listed on a single security blocklist. VirusTotal analysis shows that 12 of 93 scanning engines flagged the domain as malicious, reinforcing the suspicion of credential‑phishing activity. PhishDestroy has also blocked the domain.

Although the site is no longer reachable, the combination of a recent registration date, low trust scores, a Cloudflare‑issued certificate, and multiple vendor detections provides strong evidence that the domain was used for credential‑phishing. Defenders should continue to block the domain at perimeter filters, monitor the associated IP range for any re‑use, and consider adding the domain to internal threat‑intel feeds. Ongoing vigilance is advised for any future domains registered with the same nameservers or similar certificate profiles, as threat actors often recycle Cloudflare infrastructure for short‑lived phishing campaigns.