1huj8[.]say-yt-host[.]workers[.]dev
“Page not found”
1huj8.say-yt-host.workers.dev — Konten tidak tersedia (HTTP 404). Ringkasan bukti: VirusTotal 0/93; PhishDestroy score 25/100. Registrar: Cloudflare.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of the domain 1huj8.say-yt-host.workers.dev indicates that it is associated with a generic phishing campaign and is currently offline. The domain resolves to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. DNS resolution is handled by the Cloudflare nameservers clyde.ns.cloudflare.com and sofia.ns.cloudflare.com, confirming that the domain was registered through Cloudflare, Inc. on February 27, 2026. The site presents an HTTP 404 response with the page title "Page not found," and the TLS certificate is issued by Let’s Encrypt (certificate profile E7).
Detected technologies include HTTP Strict Transport Security (HSTS), Cloudflare's edge services, and support for HTTP/3, indicating the use of modern web delivery mechanisms. The domain has been blocked by the PhishDestroy service and appears on a single external security blocklist. VirusTotal reports that the domain was scanned by 93 vendors, none of which raised a detection at the time of analysis; this lack of detections does not constitute evidence of safety. The presence of a valid SSL certificate and modern protocols suggests an attempt to appear legitimate, while the 404 status and generic page title imply that the phishing payload may have been removed or never deployed.
Uncertainty remains regarding the specific victim brand or credential collection method, as no branding or login interface has been observed. Defenders should continue to block the domain at network perimeter devices, monitor DNS queries for the domain and its associated IP, and include the address in threat‑intel feeds. Ongoing observation is recommended to detect any reactivation or new content, and any future sightings should be correlated with the existing blocklist entry and SSL fingerprint for rapid identification.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive