public-uphldapp-web[.]pages[.]dev

Analysis of public-uphldapp-web.pages.dev shows that the domain is registered through Cloudflare, Inc. and uses Cloudflare name servers lewis.ns.cloudflare.com and zainab.ns.cloudflare.com. DNS resolution points to the IPv4 address 188.114.96.3, a host commonly associated with Cloudflare’s content‑delivery network. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy filtering service, indicating that at least one downstream security product has identified malicious use.

VirusTotal has processed the domain and 12 of 91 scanned security vendors returned a positive detection, confirming that multiple independent scanners flag the site as malicious. No additional public metadata such as SSL certificate details, HTTP response codes, page title, or brand targeting has been released, so the exact content served by the site remains unverified in this report. The presence of Cloudflare as registrar and hosting provider does not, by itself, imply benign intent; rather, the combination of blocklist listing, PhishDestroy block, and multi‑vendor detections strongly suggests that the domain is being leveraged for phishing or credential‑harvesting campaigns.

Defenders should update URL filtering rules to deny traffic to public-uphldapp-web.pages.dev, monitor DNS logs for queries to the domain or its authoritative name servers, and consider adding the IP address 188.114.96.3 to network‑level deny lists where appropriate. Continuous scanning with multi‑engine services such as VirusTotal is recommended to capture any changes in the domain’s detection profile. Until further forensic analysis of the site’s payload is available, the domain should be treated as high‑risk and excluded from trusted web traffic.