page-uphold-login[.]pages[.]dev

This report analyzes the domain page-uphold-login.pages.dev, which was identified as a suspected phishing site. The page title, "Suspected phishing site | Cloudflare", and the domain name indicate an attempt to impersonate a Uphold login page. The threat posed is credential phishing, where the site is designed to deceive users into entering their Uphold account credentials, leading to account compromise and potential financial theft.

Technical evidence confirms the malicious nature of this site. VirusTotal flagged it with 8 detections out of 95 security vendors, including ADMINUSLabs, BitDefender, CyRadar, ESET, and Fortinet. The domain was registered through Cloudflare, Inc., and created on 2025-10-31. It was hosted on IP address 172.66.45.13, which is associated with AS13335 Cloudflare, Inc. in the United States. The SSL certificate was issued by Google Trust Services / WE1, and nameservers were amalia.ns.cloudflare.com and louis.ns.cloudflare.com.

The site is currently DOWN/OFFLINE, mitigating immediate risk. However, the threat level remains high, as evidenced by a GridinSoft trust score of 0/100, a ScamAdviser trust score of 1/100, and a DOM risk score of 90. The site is listed on 1 blocklist. Users should avoid any interaction with this domain and ensure their Uphold credentials are not compromised.