tyukfu[.]pages[.]dev

The domain tyukfu.pages.dev was created on 12 November 2024 and is hosted on Cloudflare Pages, resolving to the IPv4 address 188.114.97.3. It is currently listed on two reputable blocklists—PhishDestroy and ScamSniffer—indicating that it has been identified as a malicious resource by multiple threat‑intelligence feeds. VirusTotal analysis shows that 4 out of 91 security vendors have flagged the domain, reinforcing the suspicion that it is being used for phishing‑related activity.

The domain’s risk level is classified as elevated and its operational status is active, meaning it may still be serving malicious content or redirecting victims. No additional public indicators such as page title, SSL certificate details, HTTP response codes, or Safe Browsing verdicts are available in the current intelligence set, leaving the exact content and targeted brand of the phishing campaign unconfirmed. Defenders should block traffic to tyukfu.pages.dev at network perimeters and update endpoint protection signatures to include the two blocklist entries.

Continuous monitoring of the IP address 188.114.97.3 for anomalous connections is advised, as Cloudflare‑hosted resources can be repurposed rapidly. Organizations should also consider adding the domain to internal URL filtering policies and reviewing any authentication attempts that may involve credential submission to unknown endpoints. Given the limited public evidence, further investigation—such as sandboxed retrieval of the landing page and correlation with user‑reported phishing attempts—will be necessary to fully characterize the threat vector and to determine whether additional compromised infrastructure is associated with this domain.