manage-uphod-login-io[.]pages[.]dev

This domain, manage-uphod-login-io.pages.dev, was identified as a credential phishing site and taken offline by July 24, 2026. Registered on February 21, 2026, through Cloudflare, Inc., the domain resolved to IP 172.66.47.133, hosted on Cloudflare's US-based infrastructure (AS13335). At the time of assessment, the HTTP status returned a 403 error, and the page title displayed 'Suspected phishing site | Cloudflare,' indicating prior detection by the hosting provider. Analysis reveals that 14 of 93 security vendors on VirusTotal flagged the domain as malicious. It appears on one security blocklist and is blocked by PhishDestroy.

Trust scores from Scamadviser and Gridinsoft both rated the domain at 1/100 and 0/100, respectively, further supporting its classification as high-risk. The domain employed HSTS, Cloudflare security features, and HTTP/3, which may have been leveraged to evade detection or enhance perceived legitimacy. Nameservers novalee.ns.cloudflare.com and dion.ns.cloudflare.com were in use, and the SSL certificate was issued by Google Trust Services (WE1). No specific brand impersonation or phishing kit details were confirmed in the available data.

The exact content of the phishing page remains unanalyzed, as the domain is currently offline. Defenders should treat this domain as confirmed phishing infrastructure and consider blocking it at the network level. Historical logs should be reviewed for connections to 172.66.47.133 or the domain itself, particularly between February and July 2026. Further investigation may be warranted if additional indicators, such as associated email addresses or redirect chains, are identified.