bafkreibpziqjabsc3nal7lelw26qwoxr4b7u6inawsxpasg4ogcdr3jm3m[.]ipfs[.]dweb[.]link
“Sign in - Professional Email”
bafkreibpziqjabsc3nal7lelw26qwoxr4b7u6inawsxpasg4ogcdr3jm3m.ipfs.dweb.link — Belum terverifikasi. Peniruan identitas merek: Amazon; Jenis penipuan: Credential Phishing. Ringkasan bukti: VirusTotal 17/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CyRadar); URLQuery 3 alerts; CF Radar malicious; PhishDestroy score 100/100. Registrar: CSC.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain bafkreibpziqjabsc3...ipfs.dweb.link was registered on May 02, 2026 and is currently active, resolving to IP 209.94.90.2 located in the United States and owned by Protocol Labs. It is hosted behind Cloudflare using the nameservers clarissa.ns.cloudflare.com and tate.ns.cloudflare.com, and serves traffic over HTTP/3 with a valid Let’s Encrypt/E8 TLS certificate. The site returns HTTP 200 and presents the page title "Sign in - Professional Email," indicating a credential‑phishing campaign that impersonates Amazon. Technical analysis shows the presence of IPFS, Backbone.js, Underscore.js, and jQuery libraries. The Gridinsoft trust score is 0/100, and the domain appears on one security blocklist, with PhishDestroy already blocking it. VirusTotal reports 19 of 91 scanners flagging the domain, reinforcing its malicious nature. The infrastructure is tied to CSC Corporate Domains, Inc., suggesting a commercial registrar service. While the exact phishing landing page content has not been examined, the available indicators confirm a high‑risk Amazon brand impersonation. Defenders should immediately block the domain at DNS and proxy layers, monitor outbound connections to the associated IP address, and consider sinkholing the IP range if feasible. Continuous threat‑intel feeds should be consulted for any additional indicators of compromise, and user awareness campaigns should highlight the specific page title used in this campaign to reduce successful credential harvesting.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | bafkreibpziqjabsc3nal7lelw26qwoxr4b7u6inawsxpasg4ogcdr3jm3m.ipfs.dweb.link |
malicious | Sinkholed |
| OpenDNS | bafkreibpziqjabsc3nal7lelw26qwoxr4b7u6inawsxpasg4ogcdr3jm3m.ipfs.dweb.link |
phishing | Phishing Block |
| Cloudflare DNS | bafkreibpziqjabsc3nal7lelw26qwoxr4b7u6inawsxpasg4ogcdr3jm3m.ipfs.dweb.link |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 6 identified
IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web.
ipfs.tech Keyakinan 100%BackboneJS is a JavaScript library that allows to develop and structure the client side applications that run in a web browser.
backbonejs.org Keyakinan 100%Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.
underscorejs.org Keyakinan 100%jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com Keyakinan 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of bafkreibpziqjabsc3nal7lelw26qwoxr4b7u6inawsxpasg4ogcdr3jm3m.ipfs.dweb.link · checked May 2, 2026
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive