mason-siege.pages.dev
“Desktop Browser Required”
mason-siege.pages.dev — Dapat dijangkau · akses dibatasi (HTTP 403). Ringkasan bukti: VirusTotal 10/89 (alphaMountain.ai, ESET, Emsisoft, Fortinet, G-Data); PhishDestroy score 80/100. Registrar: Cloudflare Pages.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Ringkasan bukti
mason-siege.pages.dev is a tenant hostname on Cloudflare, not a separately registered domain. PhishDestroy first observed the hostname on Sep 8, 2026. The captured page title is “Desktop Browser Required”. Current evidence score: 80/100 (critical).
One source contains a positive finding: VirusTotal. VirusTotal recorded 10 detections among 89 engines: alphaMountain.ai, ESET, Emsisoft, Fortinet, G-Data, Kaspersky, Netcraft, Sophos, URLQuery, Webroot on Sep 18, 2026 at 16:00 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Sep 20, 2026 at 14:20 UTC. Google Safe Browsing returned no flag on Sep 18, 2026 at 16:01 UTC.
An access-restricted HTTP 403 response was recorded on Sep 19, 2026 at 01:29 UTC. Cloudflare is the hosting platform for this tenant, not its registrar. At collection time, the hostname resolved to 172.66.47.162 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare infrastructure, not the tenant operator. The platform TLS certificate was issued by Google Trust Services / WE1 with validity through Dec 7, 2026; checked Sep 16, 2026 at 19:02 UTC.
Stored content provides classification context, but only one source contains a positive finding. The stored fields do not identify an impersonated brand or victim interaction.
Forensic History & Detection Timeline
-
VirusTotal Detections Update Sep 18, 2026 · 14:48 UTCVirusTotal scanner detections updated from 1 to 10. Added scanner alerts: ESET, Emsisoft, Fortinet, G-Data, Kaspersky, Netcraft, Sophos, Webroot, alphaMountain.ai.
-
Domain Status Transition Sep 17, 2026 · 00:00 UTCDomain state transitioned from alive to dead.
-
Threat First Observed Sep 16, 2026 · 18:23 UTCDomain ingestion complete. Initial state is marked as alive.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Evasion analysis
Cloaking suspected: scanner and victim titles differ
Stored crawler-versus-browser observations for this host, plus a live fingerprint check for Keitaro-style traffic distribution systems.
- Stored cloaking flag
- Not yet scanned
- Last cloaking scan
- Server header seen by scanner
cloudflare
Scanner note: cloudflare_ban: raw=cf_phishing_block; http=403; via=https_proxy; server=cloudflare; provider_error=cloudflare_phishing_interstitial
Provider response during scan: cloudflare_phishing_interstitial
Intelijen Domain
Detail teknisDNS, SAN SSL, cap waktu
Teknologi · 3 identified
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive