uphol-d-com[.]pages[.]dev

This domain, uphol-d-com.pages.dev, operates as a generic phishing site designed to harvest user credentials through fake login portals. Analysis indicates the page mimics legitimate authentication interfaces, tricking visitors into submitting sensitive information such as usernames, passwords, and potentially multi-factor authentication codes. The threat extends to corporate and personal accounts, with potential secondary risks including account takeovers and unauthorized access to linked services. Infrastructure analysis reveals the domain was registered on November 03, 2025, through Cloudflare, Inc., and currently resolves to the IP address 188.114.97.3 (AS13335, US). It appears on two security blocklists (PhishDestroy and PhishingDB) and is flagged by 16 out of 95 security vendors on VirusTotal. The SSL certificate, issued by Google Trust Services (WE1), does not mitigate the malicious intent, as the domain’s content remains explicitly deceptive. The page title, 'Suspected phishing site | Cloudflare,' further confirms its fraudulent nature. Users who visited uphol-d-com.pages.dev should immediately revoke any entered credentials, particularly if reused across platforms. Enable multi-factor authentication on all accounts as a secondary safeguard. Monitor linked financial or communication services for unauthorized activity, and report the incident to internal security teams or relevant authorities. The domain is currently offline, but similar threats may persist under alternate infrastructure.