https://temporary-maintenance143.site/superbahis.html
104.21.6.88 · Cloudflare, Inc.
Toronto, Canada
1 day ⚠
403 · 22.0s
Valid· E8, Let's Encrypt, US
COMPLETED
Linked Phishing Report
This scan is attached to a vendor submission report
Brand
ATO
Vendors
29/31
Status
partial
No KB/IOK detections were recorded for this scan.
Scanner blocked by cloudflare
This scan likely captured a block/challenge page, so the AI analysis may not reflect the real site victims see.
finance | technology | ecommerce | cryptocurrency | other · 6/3/2026
The scan target resolves to a newly registered domain (1 day old) using a Cloudflare block page rather than content from a known brand. The page presents a Cloudflare 403/Attention Required block and does not display any recognizable branding or credential collection UI in static HTML. Network evidence shows a POST to a Cloudflare rum endpoint and a subsequent IP discovery request, but the actual phishing content could not be loaded due to the WAF, which indicates anti-scraping behavior. Nonetheless, domain-intelligence signals and the blocking page strongly suggest the operator is attempting to evade scans, with potential for later hosting of phishing content on the same domain.
Capture
Stages: 3
Canonical: Late Render (+3s)
Changed: No
Credential Signals
Forms: 0
Password fields: 0
Late-stage login UI: No
Resource Signals
Resources: 7
Hosts: 2
Domains: 2
No specific IOCs identified in source
The domain is extremely young and behind Cloudflare, and the scan was blocked by a WAF, with the block page indicating defensive controls. While the actual phishing content could not be retrieved, the combination of a new domain, potential dynamic credential collection (SPA risk), and explicit anti-scanner evasion signals strongly suggests malicious intent and the possibility of hosting phishing content in the near term. Recommend monitoring and further investigation; consider taking preventive actions if corroborated by additional content showing impersonation or credential harvesting attempts.
Monitor