pedangjpitcom[.]pages[.]dev

Analysis of the domain pedangjpitcom.pages.dev indicates active phishing infrastructure targeting users of mobile gaming platforms. The domain, registered on May 6, 2026, through Cloudflare, Inc., currently resolves to the IP address 188.114.96.3. The page title, 'PEDANGJP LINK | Ekosistem Resmi Mobile Game Slot Anti Lemot,' suggests an attempt to impersonate an official ecosystem for mobile gaming, though no specific brand affiliation has been confirmed beyond the title's claims. The domain is hosted on Cloudflare's content delivery network, leveraging technologies such as AMP, Lightbox, HSTS, and HTTP/3, which are consistent with modern web infrastructure but do not inherently indicate malicious intent. The domain holds a Gridinsoft trust score of 0/100, reflecting a lack of established reputation. It appears on one security blocklist, as flagged by PhishDestroy, though no detections were recorded by the 95 vendors that scanned the domain on VirusTotal. The absence of detections does not confirm safety, as phishing domains often evade initial detection through rapid rotation or obfuscation techniques. The SSL certificate is issued by Let's Encrypt, a common provider for both legitimate and malicious domains. Defenders should treat this domain as high-risk due to its recent registration, low trust scores, and association with phishing activity. Network-level blocking or monitoring of traffic to 188.114.96.3 is recommended, particularly for environments where mobile gaming or related financial transactions occur. Further investigation into the domain's content and user interaction patterns is necessary to determine the exact nature of the phishing scheme, including whether it involves credential harvesting, fraudulent transactions, or other malicious activities. The domain remains under active investigation, and updates to its risk profile should be monitored.