sso-upheld-wallt[.]pages[.]dev

This site, hosted on the domain sso-upheld-wallt.pages.dev, was titled "The Multi-Asset Power of the Uphold Wallet: Crypto, Metals, & Fiat in One Place" and was flagged as an impersonation scam. It posed as the legitimate financial platform Uphold, specifically targeting users through a fake login or wallet interface. The primary threat is social engineering, designed to trick visitors into entering sensitive credentials or financial information.

Technical analysis shows the domain was flagged by 3 out of 95 VirusTotal vendors, including G-Data, Google Safe Browsing, and Sophos. Google Safe Browsing specifically marked it for SOCIAL_ENGINEERING. The site was registered on 2025-11-01 through Cloudflare, Inc., with an IP address of 172.66.47.3 (US) assigned to AS13335 Cloudflare, Inc. It used an SSL certificate from Google Trust Services (WE1) and nameservers arnold.ns.cloudflare.com and melany.ns.cloudflare.com.

At the time of analysis, the site was offline. Its DOM risk score was 93 out of 100, and GridinSoft trust rating was 0 out of 100. The combination of a high risk score, low trust rating, and active flagging by multiple security vendors indicates a severe threat, though its current offline status mitigates immediate risk.