Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is nicenic@139.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
abs63[.]vip
Pemeriksaan phishing dan keamanan abs63.vip
“ABSURD SAMARA - Главная”
abs63.vip — Terakhir diketahui aktif (HTTP 200). Ringkasan bukti: VirusTotal 5/91 (alphaMountain.ai, CRDF, Forcepoint ThreatSeeker, Fortinet, Gridinsoft); Spamhaus DBL_PHISH; PhishDestroy score 80/100. Registrar: NiceNIC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain abs63.vip was registered on 21 February 2026 through NiceNIC International Group Co., Limited and is currently resolved to the IP address 188.114.97.3. The IP belongs to Cloudflare, Inc. (AS13335) and is geolocated to the United States. The site serves its content over HTTPS using a certificate issued by Google Trust Services under the WE1 intermediate, and the HTTP response code is 200. The page title returned by the server is “ABSURD SAMARA - Главная”. Technology fingerprints captured by passive scans indicate the use of Vue.js, Cloudflare Browser Insights and HTTP/3, confirming that the infrastructure is hosted behind Cloudflare’s edge network.
The domain appears on a single public blocklist and is explicitly listed by the PhishDestroy blocklist provider. Gridinsoft’s trust scoring system assigns a score of 0 out of 100, reflecting a high confidence of malicious intent. VirusTotal has recorded two detections out of ninety‑five scanned engines, reinforcing the suspicion of abuse. The authoritative name servers are brit.ns.cloudflare.com and darwin.ns.cloudflare.com, both belonging to Cloudflare’s DNS service. The current operational status is marked as active, and the threat classification is generic phishing.
Analysis indicates that the observed infrastructure—Cloudflare front‑end, a modern JavaScript framework, and a low trust score—matches patterns commonly employed by phishing operators to host credential‑harvesting pages while obscuring origin. The limited public visibility (only one blocklist entry) suggests that detection coverage may be incomplete. Defenders should add abs63.vip to URL filtering rules, monitor DNS queries for the associated Cloudflare name servers, and enforce TLS inspection to capture the underlying HTTP payload. Network sensors should flag any outbound connections to 188.114.97.3, and endpoint security solutions should treat the domain as malicious based on the existing vendor detections and blocklist listings.
Intelijen Keamanan Jaringan Registrar context
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Latest Classified Outcome 2026-08-08 02:39:42 UTC
Teknologi · 4 identified
Progressive JavaScript framework for building user interfaces.
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Bukti Terarsip
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of abs63.vip · checked Mar 2, 2026
Bukti & Laporan Eksternal
PD-20260213-286922 Recipient: nicenic@139.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive