Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is as139341_abuse@aceville.net.
The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
webmail-onehealth-ca-groupoffice-9o6ir1yhw8[.]edgeone[.]cool
“Email Portal Access | Secure Digital Platform”
webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool — असत्यापित. ब्रांड प्रतिरूपण: Genericemail; घोटाले का प्रकार: Generic Phishing. साक्ष्य सारांश: VirusTotal 18/91 (Abusix, ADMINUSLabs, BitDefender, Chong Lua Dao, Cluster25); URLQuery 6 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; PhishDestroy score 95/100. रजिस्ट्रार: DNSPod.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
The domain webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool was identified as a generic phishing portal designed to impersonate secure email login interfaces. Analysis indicates the site specifically targeted enterprise users by presenting a fraudulent authentication page titled Email Portal Access | Secure Digital Platform. The domain is currently offline, though prior activity suggests credential harvesting as the primary objective. Infrastructure analysis reveals the domain was registered through DNSPod, Inc. and resolved to the IP address 43.174.246.29. It appears on one security blocklist and holds a Gridinsoft trust score of 0/100, indicating high-risk classification. VirusTotal records show 19 of 95 security vendors flagged the domain as malicious. The SSL certificate was issued by DigiCert, Inc., and the site employed common front-end technologies including Bootstrap, Cloudflare, Font Awesome, cdnjs, and Popper, likely to enhance the appearance of legitimacy. Current status confirms the domain has been taken offline, though residual risks may persist. Organizations are advised to monitor for credential reuse attempts, particularly from users who may have interacted with the site prior to its deactivation. Network administrators should block the IP address 43.174.246.29 and implement email filtering rules to prevent delivery of messages containing links to the domain. Security teams are recommended to review authentication logs for anomalous access patterns and enforce multi-factor authentication for all enterprise accounts as a preventive measure.
नेटवर्क सुरक्षा इंटेलिजेंस
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool/ |
malware | Detects file containing Telegram Bot API |
| YARAhub by abuse.ch | webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool/favicon.ico |
malware | Detects file containing Telegram Bot API |
| DigiCert UltraDNS | webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool |
malicious | Sinkholed |
| OpenDNS | webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool |
phishing | Phishing Block |
| DNS4EU | webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool |
malicious | Sinkholed |
| Hagezi Threat Feed | webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool |
malicious | Sinkholed |
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
Registration: edgeone.cool
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain edgeone.cool behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
तकनीकें · 5 identified
Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com 100% विश्वासCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% विश्वासPopper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.
popper.js.org 100% विश्वासवायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of webmail-onehealth-ca-groupoffice-9o6ir1yhw8.edgeone.cool · checked Jun 26, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260522-E447DB Recipient: as139341_abuse@aceville.net क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।