jdihnasipadangnampol[.]pages[.]dev

The domain jdihnasipadangnampol.pages.dev was registered on July 05, 2025 and is currently resolved to the IP address 172.66.47.112, which belongs to the Cloudflare network (AS13335). The hosting provider is listed as Cloudflare, Inc., with nameservers arnold.ns.cloudflare.com and tani.ns.cloudflare.com. The site presents a valid SSL certificate issued by Google Trust Services under the WE1 label, and it serves content over HTTP/3 with HSTS enforced. Detected web technologies include AMP, Lightbox, and Cloudflare‑managed security features.

Analysis of the site’s metadata reveals a page title of "MISTERHOKI 🍉 Portal Jaringan Dokumentasi dan Informasi Hukum Pengadilan Negeri Padang," indicating an attempt to masquerade as a legal documentation portal for a regional court. The classification assigned by threat intel sources is generic_phishing, and the risk level is marked as high. The domain is listed on a single security blocklist and has been flagged by PhishDestroy, though it remains active and returns HTTP status 200.

VirusTotal scans show that 5 out of 95 security vendors have flagged the domain, reinforcing the suspicion of malicious intent. The low Gridinsoft trust score of 0/100 further reflects the poor reputation of the site. No additional content analysis is available beyond the page title, leaving the exact phishing workflow and credential‑harvesting mechanisms unverified.

Given the confirmed infrastructure attributes, the presence of a legitimate‑looking SSL certificate, and the active blocklist status, defenders should treat jdihnasipadangnampol.pages.dev as a high‑confidence phishing host. Immediate actions include adding the domain to DNS‑ and web‑filter blocklists, monitoring for outbound connections to the associated IP address, and alerting end‑users about the fraudulent nature of the site. Continuous surveillance is advised to detect any evolution of the payload or changes in hosting that could affect mitigation strategies.