up-held-en-users[.]pages[.]dev

The domain up-held-en-users.pages.dev is identified as a fake login phishing site and is currently offline. This domain posed a high risk to users and was designed to capture sensitive information through a deceptive login form.

Analysis indicates that the domain was flagged by 11 of 95 VirusTotal vendors, which is a significant indicator of malicious intent. The domain is registered through Cloudflare, Inc. and resolves to the IP address 188.114.96.3, which is located in the United States and part of the AS13335 Cloudflare, Inc. network. The domain was created on October 30, 2025, and appears on one security blocklist. Google Safe Browsing has also flagged this domain as a phishing site. The SSL certificate is issued by Google Trust Services / WE1, which might be used to instill a false sense of security in potential victims. The page title, 'Suspected phishing site | Cloudflare,' further suggests that the domain has been under scrutiny for suspected malicious activities.

Currently, the domain up-held-en-users.pages.dev is offline, which may indicate that it has been taken down by the registrar or security services. However, users should remain vigilant as phishing domains can be quickly reactivated. It is recommended that users avoid interacting with this domain and report any suspected phishing activities to their respective security teams. Organizations should update their threat intelligence databases to include this domain and IP address, and implement additional security measures such as multi-factor authentication to protect against credential theft.