microsoft-flight-simulator-free-download-for-andro[.]pages[.]dev
“Microsoft Flight Simulator Android Download: Find Alternatives Now | Microsoft Flight Simulator Fre…”
microsoft-flight-simulator-free-download-for-andro.pages.dev — 未验证. 品牌冒充:Microsoft; 诈骗类型:Brand Impersonation. 证据摘要: VirusTotal 4/91 (ADMINUSLabs, alphaMountain.ai, Forcepoint ThreatSeeker, Webroot); URLQuery 5 alerts; PhishDestroy score 76/100. 注册商: Cloudflare.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
This domain is assessed as a high-risk brand impersonation infrastructure targeting Microsoft, specifically masquerading as Microsoft Flight Simulator Android download content. Analysis indicates the page is designed to mislead users into believing it provides official software access, potentially funneling victims toward malicious downloads or deceptive redirects. The observed title structure explicitly references Microsoft Flight Simulator Android download terms, indicating intentional brand exploitation to generate search traffic and user trust. Infrastructure hosted under pages.dev enables rapid deployment of cloned content, increasing exposure risk for mobile users seeking unofficial application sources.
Evidence shows VirusTotal detection at 4/95 security vendors flagging the domain. The domain is registered through Cloudflare, Inc., resolving to IP 188.114.96.3 with hosting attributed to CloudFlare, Inc. infrastructure. Creation date is recorded as April 27, 2026. The SSL certificate is issued by Google Trust Services (WE1). The domain is currently active and listed on 1 security blocklist, with multiple telemetry sources indicating ongoing malicious classification despite use of legitimate CDN and TLS providers.
Mitigation should focus on preventing user interaction with impersonated software distribution pages. Users should avoid downloading any executable or APK content from this domain and verify software authenticity only through official vendor channels. If interaction has occurred, endpoint scanning is recommended to detect potential payload installation, along with credential monitoring if any login prompts were entered. Network-level blocking of the domain and monitoring for similar pages under pages.dev infrastructure is advised to reduce exposure to cloned brand impersonation campaigns.
网络安全情报
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | www.youtube.com/s/player/8456c9de/player_embed_es6.vflset/en_us/base.js |
audit | Hunting_JS_WebAssembly |
| Hagezi Threat Feed | normallydemandedalter.com |
malicious | Sinkholed |
| DNS4EU | normallydemandedalter.com |
malicious | Sinkholed |
| Quad9 DNS | normallydemandedalter.com |
malicious | Sinkholed |
| DNS4EU | exemplarfederallithe.com |
malicious | Sinkholed |
威胁响应 Pipeline
公共封禁名单状态
所用技术 · 9 identified
YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.
www.youtube.com 置信度 100%ShareThis provides free engagement and growth tools (e.g., share buttons, follow buttons, and reaction buttons) for site owners.
sharethis.com 置信度 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org 置信度 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 置信度 100%33Across is a technology company focused on solving the challenge of consumer attention for automated advertising.
www.33across.com 置信度 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org 置信度 100%VirusTotal 分析
网站性能分析
Google PageSpeed Insights — mobile performance audit of microsoft-flight-simulator-free-download-for-andro.pages.dev · checked Apr 27, 2026
证据与外部报告
您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。