yanggacorgacorajabang[.]pages[.]dev

Analysis on July 29, 2026 indicates that the domain yanggacorgacorajabang.pages.dev is actively leveraged for phishing campaigns and has been assigned an elevated risk rating. The domain is hosted on the IP address 188.114.97.3 and utilizes Cloudflare's DNS infrastructure, as evidenced by the authoritative nameservers chase.ns.cloudflare.com and elsa.ns.cloudflare.com. Registration details reveal that the domain was provisioned through Cloudflare, Inc., a common choice for threat actors seeking rapid deployment and built‑in mitigation bypass. The domain is presently blocked by the PhishDestroy sinkhole, demonstrating that at least one defensive network has intercepted traffic directed to it.

VirusTotal scanning shows that seven of ninety‑one security vendors have flagged the domain, confirming that multiple independent detection engines observe malicious characteristics. Additionally, the domain appears on one external security blocklist, reinforcing its reputation as a threat vector. No public page title, brand targeting, or phishing kit identifier has been disclosed, and the content of the landing page remains unverified in open‑source repositories.

Consequently, defenders should proactively add the domain and its resolved IP address to deny lists across perimeter firewalls, proxy devices, and endpoint protection platforms. Continuous monitoring of DNS queries for the domain and correlation with inbound email logs are recommended to capture any residual phishing attempts. Given the active block status and the multi‑vendor detections, the domain should be treated as a confirmed phishing source and fully quarantined until the associated infrastructure is taken offline.