MALICIOUS — CRITICAL
Phishing- und Sicherheitsprüfung für j3.appwrite.network
j3[.]
The domain j3.appwrite.network is flagged as a high-risk generic phishing site, currently active as of July 12, 2026.
- VirusTotal
- 11/91
- Blocklists
- No stored match
- Verfügbarkeit
- Erreichbar · Zugang eingeschränkt · HTTP 403
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@fastly.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Jump to section
j3.appwrite.network — Erreichbar · Zugang eingeschränkt (HTTP 403). Markenidentität: Genericemail; Betrugstyp: Credential Phishing. Zusammenfassung der Beweislage: VirusTotal 11/91 (ADMINUSLabs, alphaMountain.ai, Chong Lua Dao, CyRadar, ESET); URLQuery 6 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 93/100. Registrar: Fastly.
Die ausführliche Analyse von PhishDestroy AI bleibt auf Englisch, damit der ursprüngliche forensische Bericht unverändert bleibt.
Evidence Analysis
The domain j3.appwrite.network is flagged as a high-risk generic phishing site, currently active as of July 12, 2026. This domain was registered through Fastly on March 03, 2026, and is known to resolve to the IP address 151.101.131.52. The page title 'Sign~in to view' suggests that the site may be designed to mimic a legitimate sign-in page, potentially to trick users into providing sensitive credentials. The domain appears on one security blocklist and is blocked by PhishDestroy, indicating a level of suspicion and risk associated with it. VirusTotal reports that 11 out of 95 security vendors flag this domain, which, while not a consensus, suggests that there is a notable concern among security professionals. The domain uses several technologies, including Varnish, Bootstrap, Cloudflare, jQuery, HSTS, Google Hosted Libraries, cdnjs, and Popper, which are commonly employed in both legitimate and malicious web operations. The Gridinsoft trust score for this domain is 0 out of 100, reinforcing the high-risk assessment. While the exact content and target of the phishing attempt are not yet fully analyzed, the combination of a low trust score, partial security vendor consensus, and the use of a plausible sign-in page title indicates a significant threat. Defenders should block this domain at the network level and educate users to be wary of unsolicited sign-in requests, especially those that redirect to unfamiliar URLs. Regular monitoring of this domain and any associated IP addresses is recommended to track potential changes in the threat landscape.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
Datenabdeckung12 recorded checks
Erkenntnisse zur Netzwerksicherheit
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | onedriveverification.surge.sh/jquerys.js |
malware | Detects file containing Telegram Bot API |
| OpenDNS | j3.appwrite.network |
phishing | Phishing Block |
| DNS4EU | j3.appwrite.network |
malicious | Sinkholed |
| Cloudflare DNS | j3.appwrite.network |
malicious | Sinkholed |
| DigiCert UltraDNS | j3.appwrite.network |
malicious | Sinkholed |
| Quad9 DNS | j3.appwrite.network |
malicious | Sinkholed |
Pipeline zur Reaktion auf Sicherheitsbedrohungen
Status der öffentlichen Sperrliste
Gespeicherte Aufnahme
Domain-Intelligenz
Technische DetailsDNS, SSL-SANs, Zeitstempel
ICANN OVERSIGHT
Registration: appwrite.network
Akkreditierung und RAA-Kontext
Akkreditierung und RAA-Kontext
Registrar accreditation and DNS abuse obligations
For the registrable domain appwrite.network behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologien · 8 identified
Popular CSS framework for responsive, mobile-first web development.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comFast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
VirusTotal-Analyse
Archivierte Beweise
Website-Performanceanalyse
Google PageSpeed Insights — mobile performance audit of j3.appwrite.network · checked Jul 12, 2026
Nachweise und externe BerichteIndependent lookups and source reports
PD-20260303-2FBCB0 Recipient: abuse@fastly.com Victim safety and official reportingImmediate actions and verified reporting channels
Wenn Sie Kontoanmeldeinformationen, persönliche oder Zahlungsinformationen eingegeben oder eine Datei von dieser Domain heruntergeladen haben, ergreifen Sie sofort Maßnahmen. Nachfolgend finden Sie Ressourcen, die Ihnen helfen, den Vorfall zu melden und sich zu schützen.
Melden Sie sich bei Ihren örtlichen Behörden
Wählen Sie Ihr Land aus, um Offizielle Kontakte im Bereich Cyberkriminalität oder einen Beschwerdeentwurf erstellen → zu erhalten.