upphold-log-in[.]pages[.]dev

The domain upphold-log-in.pages.dev has been identified as a generic phishing threat. There is no specific brand or drainer kit associated with this domain. The primary objective of this domain likely involved luring users into entering sensitive information under the guise of a legitimate service, leveraging a similar domain name for deception.

Technical analysis reveals that the domain is flagged by 14 out of 95 security vendors on VirusTotal. It was registered through Cloudflare, Inc. and resolves to the IP address 188.114.97.3. The domain was created on November 04, 2025, and has been flagged for phishing by Google Safe Browsing. It appears on one security blocklist, indicating a recognition of its malicious intent by cybersecurity authorities.

Currently, this domain is offline, as indicated by its current status and the Cloudflare page title 'Suspected phishing site'. Its removal from active status suggests a mitigated risk, though historical data should prompt caution among users who may have interacted with it. Future vigilance is advised for any attempts to re-establish similar phishing infrastructure under different domain variations.