daftar-babahtoto[.]pages[.]dev

Analysis of daftar-babahtoto.pages.dev shows a newly registered domain created on 27 April 2026 that resolves to IP 172.66.44.246, a Cloudflare edge node located in Canada. The site serves HTTP 200 responses and presents a TLS certificate issued by Let’s Encrypt (E7). The page title "DAFTAR AKUN GACOR" suggests a credential‑harvesting intent, consistent with the classified scam type of credential phishing. The domain is listed on a single security blocklist and has been flagged by PhishDestroy, indicating that at least one external threat‑intel source has identified malicious use. Gridinsoft assigns a trust score of 0 / 100, reinforcing the low confidence in the site’s legitimacy. The domain is hosted on Cloudflare Pages, a static‑site service, which can obscure the underlying server infrastructure. No public malware scans have reported detections, but the absence of detections does not confirm safety. Content beyond the page title has not been publicly analyzed, leaving the exact phishing payload unknown. Defenders should block traffic to 172.66.44.246 and to the hostname daftar-babahtoto.pages.dev, monitor for any additional indicators of compromise, and treat any credentials entered on the site as potentially compromised. Ongoing investigation is warranted to confirm the full scope of the phishing campaign.