home-uphold-log-en[.]pages[.]dev
“Suspected phishing site | Cloudflare”
home-uphold-log-en.pages.dev — Contenuto non disponibile. Simulazione del marchio: Genericcloudflare; Tipo di truffa: Credential Phishing. Riepilogo delle prove: VirusTotal 8/93 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, Fortinet); URLScan malicious verdict; PhishDestroy score 74/100. Registrar: Cloudflare.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Analysis of the domain home-uphold-log-en.pages.dev shows a short-lived credential phishing infrastructure that was taken offline as of the report date, July 23, 2026. The site returned an HTTP 403 status and the page title displayed "Suspected phishing site | Cloudflare," indicating that Cloudflare’s automated takedown page is active. The domain was registered on February 21, 2026 through Cloudflare, Inc., and resolves to the IP address 172.66.44.100, which belongs to AS13335 (Cloudflare, Inc.) located in the United States. TLS termination is provided by a Google Trust Services / WE1 certificate, confirming that encrypted connections are possible but offering no assurance of legitimacy.
Reputation data is uniformly negative: Gridinsoft assigned a trust score of 0 / 100, and eight of ninety‑three VirusTotal scanners flagged the domain as malicious. The domain appears on one external security blocklist and was blocked by the PhishDestroy service, reinforcing the consensus that it is associated with credential phishing. Detected technologies include HSTS, Cloudflare’s edge services, and HTTP/3, all typical of Cloudflare‑hosted sites. Nameservers are sam.ns.cloudflare.com and deb.ns.cloudflare.com, confirming the use of Cloudflare’s DNS.
No additional intelligence, such as the specific brand being spoofed or the exact credential payload, is available from the collected data. Defenders should immediately block the domain and its resolved IP address at perimeter and DNS layers, monitor for any newly registered subdomains under the same registrar or similar naming patterns, and enforce multi‑factor authentication to mitigate potential credential reuse. Continuous threat‑intel feeds should be consulted for any re‑appearance of the domain or related indicators of compromise.
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Informazioni forensi
Tecnologie · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of home-uphold-log-en.pages.dev · checked Apr 13, 2026
Dati e relazioni esterne
Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo