logix-upheld-manage[.]pages[.]dev

Analysis indicates the domain logix-upheld-manage.pages.dev was registered on February 21, 2026 through Cloudflare, Inc. The authoritative nameservers are susan.ns.cloudflare.com and dion.ns.cloudflare.com, which resolve to the IP address 172.66.47.32 owned by AS13335 Cloudflare, Inc. in the United States. The site presents the page title "Suspected phishing site | Cloudflare" and returns an HTTP 403 status, suggesting restricted access. TLS termination is performed by a Google Trust Services certificate identified as WE1, confirming the use of Cloudflare’s SSL infrastructure. Security telemetry shows the domain appears on one blocklist and has been explicitly blocked by PhishDestroy.

VirusTotal records two of ninety‑three scanning engines flagging the domain, reinforcing its malicious classification. Gridinsoft assigns a trust score of 0 out of 100, indicating an extreme risk posture. Detected technologies include HTTP/3, HSTS, and Cloudflare CDN services. The risk level is elevated and the current operational status is offline.

While the page title and metadata confirm a credential phishing campaign, the exact payload or credential‑collection mechanism remains uncertain because no additional page content is available. Defenders should continue to block the domain at network perimeters, monitor DNS queries for the associated Cloudflare nameservers, and add the IP address 172.66.47.32 to deny lists. Ongoing observation of the registrar and any future re‑registration attempts is recommended. The aggregated evidence supports a credential phishing threat, and remediation actions should prioritize preventing user interaction with this domain.