cobasekalii[.]pages[.]dev

Analysis shows that cobasekalii.pages.dev is an active generic_phishing infrastructure observed on July 12, 2026. The site serves a page titled "SUTRATOTO : Akses Platform SUTRA TOTO melalui Link Alternatif Modern" and returns HTTP status 200 over a valid TLS certificate issued by Let’s Encrypt (E8). Technical fingerprinting reveals the use of AMP, Lightbox, HSTS, Cloudflare services and HTTP/3, with authoritative nameservers guss.ns.cloudflare.com and melinda.ns.cloudflare.com. DNS resolution points to 172.66.44.131, an address owned by Cloudflare, Inc. (AS13335) located in the United States. The domain was registered on March 08, 2026 through Cloudflare, Inc., and a single security vendor on VirusTotal flagged the host among 94 scans. It is currently listed on three blocklists—PhishDestroy, MetaMask, and SEAL—indicating that at least some security controls already recognize it as malicious. While the page content beyond the title has not been publicly disclosed, the combination of brand impersonation, high‑risk rating, and confirmed blocklist entries suggests a credible threat to users seeking the SUTRA TOTO service. Defenders should block the domain at DNS and proxy layers, monitor for outbound connections to the associated IP, and incorporate the host into threat‑intel feeds. Continuous re‑evaluation is advised as additional telemetry becomes available.