access-logiin-web-uphold[.]pages[.]dev

This domain, access-logiin-web-uphold.pages.dev, was identified as a potential phishing site on July 23, 2026. The domain was registered through Cloudflare, Inc. and was created on February 21, 2026. Analysis indicates that the site is designed to perform credential phishing, a common tactic used to steal user login credentials. The domain is currently offline, returning an HTTP status code 403, which suggests that access is forbidden or the site has been taken down. The page title, 'Suspected phishing site | Cloudflare,' further corroborates the suspicion of malicious activity.

The domain resolves to the IP address 172.66.47.97, which is located in the United States and is associated with Cloudflare, Inc. (AS13335). The SSL certificate for the domain is issued by Google Trust Services, indicating a valid HTTPS connection, which can sometimes lend a false sense of security to unsuspecting users. According to VirusTotal, 9 of 93 security vendors have flagged this domain, suggesting a moderate level of consensus among security tools regarding its malicious nature. The domain also appears on one security blocklist and has been blocked by PhishDestroy, a known security solution. Google Safe Browsing has flagged the domain for social engineering, which aligns with the credential phishing classification.

The Gridinsoft trust score for the domain is 0 out of 100, indicating a very low level of trust. Despite the domain being offline, the information gathered suggests that it was previously active and posed a significant risk. Defenders should monitor for any reactivation of the domain and ensure that security policies are updated to block this domain. Additionally, users should be educated about the risks of credential phishing and the importance of verifying the legitimacy of login pages before entering sensitive information.