chnetyuiw3efeyughduiwqgevboifqeyd5wu-99r[.]pages[.]dev
“768986590doc”
chnetyuiw3efeyughduiwqgevboifqeyd5wu-99r.pages.dev — Konten tidak tersedia. Peniruan identitas merek: Microsoft. Ringkasan bukti: VirusTotal 14/93 (ADMINUSLabs, Criminal IP, alphaMountain.ai, CyRadar, DNS8); URLQuery 1 alert; URLScan malicious verdict; PhishDestroy score 92/100. Registrar: Cloudflare.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain chnetyuiw3efeyughduiwqgevboifqeyd5wu-99r.pages.dev was observed by security telemetry on July 24, 2026 as a generic phishing infrastructure. Creation records show the domain was registered on March 03, 2026 through Cloudflare, Inc., and the authoritative name servers are kelly.ns.cloudflare.com and lamar.ns.cloudflare.com. DNS resolution points to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The hosting service advertises support for HSTS, Cloudflare’s edge network, and HTTP/3, indicating that the site was served over a modern TLS stack. The presented TLS certificate is issued by Google Trust Services under the WE1 intermediate, further confirming the use of Cloudflare’s SSL termination.
Web‑application checks returned an HTTP 404 status code and the page title extracted from the response was “768986590doc”. The site is presently taken offline, and automated scanners have recorded the domain as inactive. Threat intelligence aggregators list the domain on a single security blocklist and note that it has been blocked by the PhishDestroy filtering service. VirusTotal analysis shows that 14 of 93 scanning engines marked the domain as malicious, providing additional confidence in the phishing classification.
Evidence gaps remain regarding the specific payload or credential‑harvesting page that may have been hosted before takedown, as no content beyond the title was captured. Defenders should continue to block the domain at DNS and proxy layers, monitor for any re‑registration of the same sub‑domain pattern, and incorporate the IP address 188.114.96.3 into network‑based deny lists. Ongoing observation of Cloudflare‑originated phishing domains is recommended, given the observed use of HSTS and HTTP/3 which can complicate TLS inspection.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | chnetyuiw3efeyughduiwqgevboifqeyd5wu-99r.pages.dev |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 3 identified
HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive