logix-upheld[.]pages[.]dev

The domain logix-upheld.pages.dev is a generic phishing site designed to steal user credentials through credential phishing tactics. It does not impersonate a specific brand or utilize a known drainer kit. As of the latest verification, logix-upheld.pages.dev has been taken offline, but it previously posed an elevated risk to users who may have interacted with it.

Technical indicators confirm the malicious nature of logix-upheld.pages.dev. The domain was flagged by 2 of 95 security vendors on VirusTotal, including Fortinet and Trustwave, while appearing on 1 security blocklist (PhishDestroy). Registered through Cloudflare, Inc. on October 27, 2025, it resolved to the IP address 188.114.96.3, hosted by Cloudflare, Inc. in the US (AS13335). The SSL certificate was issued by Google Trust Services / WE1, and the observed page title was 'Suspected phishing site | Cloudflare'. The domain employed technologies such as HSTS, Cloudflare, and HTTP/3, and returned an HTTP 403 status when accessed. Nameservers for the domain were cecelia.ns.cloudflare.com and coby.ns.cloudflare.com.

Users who may have entered credentials on logix-upheld.pages.dev should immediately change passwords for any accounts accessed during that time, particularly if passwords were reused across sites. Enabling two-factor authentication (2FA) on all critical accounts is strongly recommended to mitigate further risk. Monitor financial and personal accounts for unauthorized activity, and report the phishing domain to relevant platforms, such as Google Safe Browsing, PhishTank, or local cybersecurity authorities, to assist in broader threat mitigation efforts.