# super-union-f1e3.aedfv.workers.dev — SUSPICIOUS

> super-union-f1e3.aedfv.workers.dev is a live generic phishing site with 0/95 VirusTotal detections targeting users with credential theft tactics.

## Summary
PhishDestroy identifies super-union-f1e3.aedfv.workers.dev as an active generic phishing domain leveraging Cloudflare Workers to deliver credential theft pages. The site masquerades as a legitimate service portal, employing social engineering to harvest user login credentials. No specific brand is impersonated in the observed payload, indicating a broad opportunistic campaign designed to capture credentials across multiple services.


EXACT technical indicators include 0/95 VirusTotal detections, Let’s Encrypt SSL certificate, resolution to IP 188.114.96.3, and registration via Cloudflare, Inc. The domain remains unblocked by Google Safe Browsing with no entries in public blocklists. Creation and hosting on Cloudflare Workers infrastructure provide anonymity and rapid deployment, reducing detection surface.


This domain remains active and poses ongoing risk to unprotected users. Immediate takedown requests should be filed with Cloudflare and VirusTotal. Users are advised to avoid interaction and enable browser-based phishing protection. Remaining risk is high until the domain is globally blocked and deactivated.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/8246182e-773b-4922-87b4-5d541d74e3eb
- PhishDestroy: https://phishdestroy.io/domain/super-union-f1e3.aedfv.workers.dev/
- LLM endpoint: https://phishdestroy.io/domain/super-union-f1e3.aedfv.workers.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/super-union-f1e3.aedfv.workers.dev/
Last updated: 2026-03-30