# sabtu20.pages.dev — MALICIOUS

> Sabtu20.pages.dev is a medium-risk phishing site. Learn about its infrastructure and how to protect yourself from scams linked to this active domain.

## Summary
PhishDestroy identifies sabtu20.pages.dev as a domain involved in generic phishing attacks, posing a medium risk to users. Phishing threats like this attempt to deceive individuals into revealing sensitive information, which can lead to financial loss or identity theft.

The domain sabtu20.pages.dev is registered through Cloudflare, Inc. and resolves to the IP address 188.114.96.3. VirusTotal scans indicate that 3 out of 95 security vendors have flagged this domain, suggesting some consensus about its malicious intent. Its association with a reputable hosting provider may be an attempt to evade initial detection.

Users are advised to exercise caution when encountering this domain, especially in unsolicited communications such as emails or social media messages. Avoid clicking on any links or submitting personal data on sites hosted at sabtu20.pages.dev. Organizations should consider blocking this domain at their perimeter and monitor for any related phishing attempts to reduce exposure.

## Threat Details
- Verdict: MALICIOUS
- Site status: dead (HTTP 403)
- Page title: Suspected phishing site | Cloudflare

## Domain Intelligence
- Registered: 2026-03-07 15:07:01
- Registrar: Cloudflare, Inc.
- Country: US
- IP: 188.114.96.3
- IP Country: US
- IP City: San Francisco
- IP Org: AS13335 Cloudflare, Inc.
- Nameservers: june.ns.cloudflare.com mitch.ns.cloudflare.com
- SSL Issuer: Let's Encrypt / E8

## Detection Status
- VirusTotal: 6 vendors flagged
  Vendors: ["ADMINUSLabs", "BitDefender", "CyRadar", "ESET", "G-Data", "Phishing Database"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://i.ibb.co/35vj0Lqf/ce20fa05397f.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/e8367eb1-9b1c-477b-bb90-be07a746c2c7
- Wayback Machine: https://web.archive.org/web/https://sabtu20.pages.dev
- PhishDestroy: https://phishdestroy.io/domain/sabtu20.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/sabtu20.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/sabtu20.pages.dev/
Last updated: 2026-03-19