access--uphald-oi[.]pages[.]dev

The domain access--uphald-oi.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. and is presently taken offline. Technical fingerprinting shows the site was served from the Cloudflare edge network (AS13335) with the IP address 188.114.97.3 located in the United States. The TLS certificate is issued by Google Trust Services under the WE1 designation, and the site enforced HSTS while supporting HTTP/3. Nameserver resolution points to zeus.ns.cloudflare.com and zelda.ns.cloudflare.com, confirming Cloudflare hosting.

The page title returned by the server is "Suspected phishing site | Cloudflare" and the HTTP response code was 403, indicating restricted access. Reputation services have flagged the domain: PhishDestroy listed it on a blocklist, Google Safe Browsing categorizes it as social engineering, and Gridinsoft assigned a trust score of 0 out of 100. VirusTotal scanned the domain and 12 of 95 security vendors reported detections. The threat classification from intelligence sources is credential phishing.

While the site is currently offline, the combination of blocklist inclusion, low trust score, and multiple vendor detections suggests a high risk of credential harvesting. Defenders should continue to block the domain at perimeter controls, monitor DNS queries for the associated IP and nameservers, and consider adding the domain to internal threat intelligence feeds. Ongoing observation is advised to detect any re‑activation attempts or related infrastructure.