upold-walet-en[.]pages[.]dev

This domain, upold-walet-en.pages.dev, is currently active and classified as a high‑risk generic phishing resource. Registration information shows the domain was provisioned through Cloudflare, Inc., and the authoritative nameservers are bart.ns.cloudflare.com and jo.ns.cloudflare.com, indicating the use of Cloudflare’s DNS infrastructure. DNS resolution points to the IPv4 address 188.114.97.3, a host that appears on three independent security blocklists. The same address is observed in multiple threat‑intelligence feeds, reinforcing the likelihood that it is being leveraged for malicious hosting.

Detection platforms have flagged the domain: VirusTotal reports eight out of ninety‑one security vendors flagging it as malicious, and Google Safe Browsing labels the URL with a social‑engineering warning. In addition, the domain is explicitly blocked by the PhishDestroy, MetaMask, and SEAL filtering services, confirming its presence on at least three commercial blocklists. The available evidence does not include a page‑title, SSL certificate details, or HTTP response codes, so the exact content served by the site remains unverified. However, the convergence of multiple independent detections, the presence on reputable blocklists, and the social‑engineering categorisation collectively indicate a deliberate phishing campaign.

Defenders should treat any traffic to upold-walet-en.pages.dev as hostile. Recommended actions include adding the domain and its resolved IP address (188.114.97.3) to network‑level deny lists, enforcing URL filtering policies that block the domain across proxy and endpoint solutions, and monitoring DNS logs for repeated resolution attempts. Continuous re‑evaluation is advised, as further analysis of the payload and page content may reveal additional indicators of compromise.