uni-voucher[.]xyz
uni-voucher.xyz — Konten tidak tersedia (HTTP 502). Ringkasan bukti: VirusTotal 5/93 (alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, Fortinet, SOCRadar); PhishDestroy score 65/100.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis of uni-voucher.xyz indicates that the domain was registered on February 21, 2026 and subsequently pointed to the IP address 104.21.80.1, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The TLS certificate presented by the site is the Cloudflare TLS Issuing ECC CA 1, confirming the use of Cloudflare’s edge services for SSL termination. The domain has been taken offline, and the current HTTP status reflects that the site is no longer reachable.
Independent threat‑intelligence sources have already taken mitigation steps: PhishDestroy has listed the domain as blocked, and it appears on at least one public security blocklist. VirusTotal scans show that five of ninety‑three antivirus and URL‑reputation engines flagged the domain, providing additional corroboration of malicious intent. No additional data such as page title, registrar details, Safe Browsing status, OTX references, or further trust‑score metrics are available in the current intelligence set, leaving those aspects unverified.
Defenders should continue to enforce existing blocklist rules for the IP 104.21.80.1 and the domain name, monitor for any re‑hosting attempts that may arise from the same Cloudflare edge, and consider adding the domain to internal URL filtering policies. Given the confirmed registration date, Cloudflare hosting, and the observed detection by multiple security vendors, the domain should be treated as a confirmed phishing campaign indicator, and any inbound traffic to it should be denied or redirected to a safe‑browse warning page. Ongoing vigilance is advised to capture any future re‑activation or related domains that share the same hosting infrastructure.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive