home-uphodl-w[.]pages[.]dev

The domain home-uphodl-w.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and resolves to the IP address 172.66.47.25, which belongs to AS13335 Cloudflare, Inc. in the United States. The site presented the title "Suspected phishing site | Cloudflare" and returned an HTTP 403 status code, indicating that the page was blocked at the web server level. Cloudflare’s security stack, including HSTS and HTTP/3, was observed, and the TLS certificate was issued by Google Trust Services under the WE1 certificate authority, confirming the use of a legitimate SSL chain. Gridinsoft assigned a trust score of 0 out of 100, and the classified scam type is Credential Phishing.

The domain appears on a single external blocklist and is actively blocked by the PhishDestroy service. Google Safe Browsing has flagged the domain for social engineering, and VirusTotal reports that 15 of 95 scanned security vendors flagged the domain as malicious. The nameservers davina.ns.cloudflare.com and kip.ns.cloudflare.com are standard Cloudflare resolvers. Current status is offline, and the domain has been taken down.

While the available data confirms the presence of a credential‑phishing infrastructure, no additional payload or victim interaction details have been disclosed. Defenders should continue to block the domain at perimeter filters, monitor for any resurgence of the host IP, and update endpoint and URL filtering policies with the observed indicators. Ongoing observation of Cloudflare‑hosted assets is advised, as the infrastructure may be repurposed for future campaigns.