com-uphold-login-eng[.]pages[.]dev

The domain com-uphold-login-eng.pages.dev was created on February 21, 2026 and is presently taken offline. Registration records list Cloudflare, Inc. as the registrar, and the domain resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. in the United States. The host presents an HTTPS certificate issued by Google Trust Services under the WE1 label, and the server advertises HSTS and HTTP/3 support. An HTTP request to the root URL returns a 403 status code, and the page title returned by the server is "Suspected phishing site | Cloudflare," indicating that the content has been flagged by Cloudflare’s automated protection mechanisms.

Analysis of public threat‑intel sources shows that eight of ninety‑three scanning engines on VirusTotal have flagged the domain, suggesting malicious characteristics that have been detected by a minority of vendors. Gridinsoft assigns the domain a trust score of zero out of one hundred, reinforcing the likelihood of abuse. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, providing additional confirmation of its use in credential‑phishing campaigns. Given the elevated risk rating, the combination of a low trust score, partial VirusTotal detections, and active blocklist listings, defenders should treat the domain as hostile.

Recommended actions include ensuring that any outbound connections to the domain are denied at the network perimeter, updating URL filtering policies to incorporate the domain and its associated IP address, and monitoring for any residual references in email or web traffic logs. Because the site is currently offline, continuous observation is advised in case the infrastructure is re‑hosted under a different IP or sub‑domain.