eng-uphld-logii[.]pages[.]dev

The domain eng-uphld-logii.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and resolves to the IPv4 address 188.114.97.3, which is announced by AS13335 (Cloudflare, Inc.) in the United States. The site presents a HTTP 403 response and the page title returned by the server is “Suspected phishing site | Cloudflare”. The SSL certificate is issued by Google Trust Services under the identifier WE1, indicating a valid TLS handshake despite the malicious classification. Reputation services assign extremely low scores: Scamadviser reports a trust score of 1 / 100, Gridinsoft a score of 0 / 100, and the domain appears on a single security blocklist.

VirusTotal analysis shows that eleven of ninety‑five scanning engines flagged the domain, reinforcing the suspicion of phishing activity. The domain is currently marked as offline and has been blocked by the PhishDestroy service. Detected technologies include HSTS, Cloudflare’s edge services, and HTTP/3 support, all of which are typical for domains hosted on Cloudflare’s network. At present, no specific brand or credential‑capture page has been identified, and the limited public evidence consists primarily of infrastructure and reputation data.

Consequently, the exact phishing vector and target audience remain uncertain. Defenders should continue to monitor the domain for any re‑activation, enforce blocklist updates to include the IPv4 address 188.114.97.3, and ensure that endpoint protection solutions incorporate the observed VirusTotal detections. Network‑level controls that block outbound connections to Cloudflare‑hosted IP ranges associated with this domain may reduce exposure, and security teams should advise users to avoid interactions with any URLs that resolve to the listed nameservers (martin.ns.cloudflare.com, sneh.ns.cloudflare.com) when paired with the suspicious host.