logn-uphldcom[.]pages[.]dev

The domain logn-uphldcom.pages.dev is actively serving HTTP 200 responses and presents the page title “Uphold.com Login Guide: Secure Access & Troubleshooting Solutions”. Registration data shows the domain was created on 2026-04-03 and is hosted behind Cloudflare’s network, using the nameservers blakely.ns.cloudflare.com and kaiser.ns.cloudflare.com. The TLS certificate is issued by Google Trust Services under the WE1 profile, confirming the connection is encrypted. DNS resolution maps the domain to IP 172.66.44.231, which belongs to Cloudflare, Inc. and is geolocated to Canada. Threat intelligence flags the site as a credential‑phishing operation targeting the Uphold brand; VirusTotal records indicate that 7 of 94 scanners have identified malicious characteristics, and the domain appears on a single public blocklist, currently blocked by PhishDestroy. The Gridinsoft trust score of 0/100 further corroborates the malicious assessment. No additional content analysis is available beyond the page title, leaving the exact phishing payload and data‑capture mechanisms unconfirmed. Defenders should add the domain and its resolving IP to blocklists, monitor DNS queries for similar Cloudflare‑hosted subdomains, and enforce credential‑verification controls for any traffic attempting to access the indicated login guide. Continuous re‑evaluation is advised as further forensic evidence becomes available.