fx0ba3l4lqueq0pkj83owdkw[.]pages[.]dev
“Google”
fx0ba3l4lqueq0pkj83owdkw.pages.dev — Konten tidak tersedia. Peniruan identitas merek: Gmail; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 9/95 (ChainPatrol, alphaMountain.ai, BitDefender, CyRadar, Fortinet); Google Safe Browsing flagged; PhishDestroy score 80/100. Registrar: Cloudflare.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain fx0ba3l4lqueq0pkj83owdkw.pages.dev was registered on November 20, 2025 through Cloudflare, Inc. and resolves to the IP address 172.253.62.105, which is owned by Google LLC (AS15169) in the United States. DNS resolution is served by Cloudflare name servers aisha.ns.cloudflare.com and kenneth.ns.cloudflare.com, and the site is protected by Cloudflare‑provided HTTP/3 and HSTS. An SSL certificate issued by Google Trust Services under the identifier WE1 is present, indicating that the TLS handshake terminates with a Google‑issued certificate despite the domain not being owned by Google. The HTTP response currently returns a 403 status code, and the site is reported as taken offline at the time of analysis.
Page metadata reports a title of "Google," which aligns with the observed SSL issuer but does not confirm any legitimate Google content. The domain is classified as a brand impersonation targeting Gmail, and Google Safe Browsing flags it for social engineering. Security telemetry shows the domain appears on one blocklist and is blocked by PhishDestroy, while the Gridinsoft trust score is 0 out of 100. VirusTotal analysis records nine of ninety‑five scanners flagging the domain as malicious, reinforcing the suspicion of abuse.
Although the actual payload or page content has not been captured, the combination of brand‑related title, impersonation label, low trust score, blocklist presence, and multiple vendor detections provides strong evidence of malicious intent. Defenders should add the domain to network and email filtering rules, monitor DNS queries for the associated IP range, and consider broader threat‑intel sharing to prevent credential‑ harvesting attempts against Gmail users. Continuous re‑evaluation is advised in case the site returns to an active state or new indicators emerge.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Intelijen Forensik
Teknologi · 3 identified
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of fx0ba3l4lqueq0pkj83owdkw.pages.dev · checked Apr 11, 2026
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive