mo-uphuld-en[.]pages[.]dev

The domain mo-uphuld-en.pages.dev has been identified as a generic phishing threat, meaning it was designed to impersonate a legitimate service to steal user credentials or sensitive information. Although no specific brand or drainer kit was identified, the domain's structure and behavior are consistent with common phishing campaigns.

Technical analysis reveals that this domain has a VirusTotal score of 11/95, indicating that 11 out of 95 security vendors flagged the domain as malicious. The domain was registered on October 11, 2025, through Cloudflare, Inc., and resolves to IP address 172.66.44.98. It is listed on one security blocklist and was flagged by Google Safe Browsing as a suspected phishing site. The SSL certificate is issued by Google Trust Services (WE1). These indicators collectively confirm a significant risk profile.

Currently, mo-uphuld-en.pages.dev is offline, displaying a 'Suspected phishing site | Cloudflare' warning page. The site has been taken down, likely by Cloudflare in response to abuse reports. However, the underlying infrastructure could be reused for future attacks. Users should remain vigilant and avoid clicking on any links associated with this domain. PhishDestroy recommends blocking this domain at the network level and reporting any similar domains to relevant authorities.