home-uphld--uss[.]pages[.]dev

The domain home-uphld--uss.pages.dev was registered through Cloudflare, Inc. on February 21, 2026 and is presently taken offline, returning an HTTP 403 status code. DNS resolution points to the Cloudflare edge address 172.66.44.60, located in the United States under ASN 13335, confirming that the infrastructure is hosted on Cloudflare’s network. The authoritative nameservers are harlee.ns.cloudflare.com and nash.ns.cloudflare.com, both belonging to Cloudflare. The site presents the page title "Suspected phishing site | Cloudflare" and employs modern transport technologies, including HSTS and HTTP/3, indicating a fully TLS‑enabled configuration. The TLS certificate is issued by Google Trust Services under the WE1 label, which is typical for Cloudflare‑proxied sites.

Threat intelligence flags the domain as a credential phishing operation. It appears on a single security blocklist, specifically PhishDestroy, and Google Safe Browsing has classified it as a social engineering threat. VirusTotal analysis shows that 11 of 93 security scanners flagged the domain, reinforcing the malicious assessment. The Gridinsoft trust score is 0 out of 100, reflecting an extremely low reputation. No additional intelligence such as payload samples or phishing page screenshots is available, so the exact credential collection mechanisms remain unknown.

Given the confirmed phishing classification, the high risk rating, and the presence on both blocklist and Google Safe Browsing, defenders should immediately block any outbound or inbound traffic to home-uphld--uss.pages.dev at the DNS and network layers. Monitoring for attempted connections to the resolved IP 172.66.44.60 is advisable, as the underlying Cloudflare edge could be reused for other malicious payloads. Incident response teams should also search internal logs for any user credential submissions that may have been directed to this domain prior to its takedown, and enforce credential rotation where appropriate.