Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@1api.net.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
bafkreid5akqsjzkofrb2xmhytj3bpeevrvgm3gh2k7v44ucvv2el4m67oe[.]ipfs[.]w3s[.]link
“410 Gone”
bafkreid5akqsjzkofrb2xmhytj3bpeevrvgm3gh2k7v44ucvv2el4m67oe.ipfs.w3s.link — Belum terverifikasi. Peniruan identitas merek: Networksolutions; Jenis penipuan: Impersonation. Ringkasan bukti: VirusTotal 12/91 (ADMINUSLabs, alphaMountain.ai, Chong Lua Dao, CyRadar, ESET); URLQuery 6 alerts; URLScan malicious verdict; CF Radar malicious; PhishDestroy score 94/100. Registrar: 1API.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain bafkreid5akqs.ipfs.w3s.link was registered on February 27, 2026 through 1API GmbH and is hosted behind Cloudflare (AS13335) with the IP address 172.64.146.87 located in the United States. The site presents an HTTP 301 redirect and returns a page title of "410 Gone," indicating that the original content is no longer available. The SSL certificate is issued by Google Trust Services under the WE1 label, confirming the use of a valid TLS chain. Infrastructure analysis shows the domain is served via Cloudflare’s HTTP/3 stack and uses the nameservers paislee.ns.cloudflare.com and theo.ns.cloudflare.com. The domain appears on a single security blocklist (PhishDestroy) and has been flagged by 16 of 93 vendors on VirusTotal, reinforcing its malicious classification as a generic phishing vector. Current observations suggest the site remains active despite the 410 response, possibly serving malicious payloads or redirecting victims elsewhere. Uncertainty remains regarding the exact phishing campaign payload, target brand, or lure employed, as no page content has been captured beyond the title. Defenders should add the domain and its associated IP to network blocklists, monitor DNS queries for the domain and its subdomains, and enforce TLS inspection to detect any hidden redirects. Continuous re‑evaluation of VirusTotal and blocklist feeds is recommended to capture any escalation in detection counts or additional indicators of compromise.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | bafkreid5akqsjzkofrb2xmhytj3bpeevrvgm3gh2k7v44ucvv2el4m67oe.ipfs.w3s.link |
malicious | Sinkholed |
| OpenDNS | bafkreid5akqsjzkofrb2xmhytj3bpeevrvgm3gh2k7v44ucvv2el4m67oe.ipfs.w3s.link |
phishing | Phishing Block |
| Cloudflare DNS | bafkreid5akqsjzkofrb2xmhytj3bpeevrvgm3gh2k7v44ucvv2el4m67oe.ipfs.w3s.link |
malicious | Sinkholed |
| DNS4EU | bafkreid5akqsjzkofrb2xmhytj3bpeevrvgm3gh2k7v44ucvv2el4m67oe.ipfs.dweb.link |
malicious | Sinkholed |
| Cloudflare DNS | bafkreid5akqsjzkofrb2xmhytj3bpeevrvgm3gh2k7v44ucvv2el4m67oe.ipfs.dweb.link |
malicious | Sinkholed |
| OpenDNS | bafkreid5akqsjzkofrb2xmhytj3bpeevrvgm3gh2k7v44ucvv2el4m67oe.ipfs.dweb.link |
phishing | Phishing Block |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: w3s.link
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain w3s.link behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 2 identified
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
PD-20260227-3DE3BD Recipient: abuse@1api.net Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive