VirusTotal
3 / 92 engine detections
Buka laporan“404: This page could not be found.”
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@name.com.
The latest stored availability evidence still shows the domain reachable; 1 month has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Domain dalam daftar blokir: ihgfnotexistsnotexists3216c8cb8a8-1669-4888-9584-d7052cf15662.acquency.com — Terakhir diketahui aktif (HTTP 200). Ringkasan bukti…
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
3 / 92 engine detections
Buka laporan1 threat-system alert
Buka laporan15/100
Buka laporanno community references
Buka laporanprovider verdict: clean
Buka laporanNo threat flag
Buka laporanNo malicious flag
Buka laporanResults reflect each source’s collection time. Zero detections do not guarantee safety. OTX references are community publications.
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | ihgfnotexistsnotexists3216c8cb8a8-1669-4888-9584-d7052cf15662.acquency.com |
malicious | Sinkholed |
PhishDestroy threat report
This long, machine-generated subdomain of acquency.com is classified by PhishDestroy as an impersonation phishing page. It poses as a legitimate service so that crypto users trust it with their credentials or wallet. PhishDestroy first flagged it on 2026-09-09, and it was still online and serving content when checked on 2026-10-19. The page currently carries the title "404: This page could not be found.", while we classify the host as impersonation phishing.
Impersonation phishing copies the look, wording and flow of a trusted brand closely enough that a visitor does not notice they have left the real site. The victim is then asked to sign in, enter a recovery phrase, or connect and approve a wallet action. Whatever is typed or signed goes to the operator, who can use it to take over accounts or move funds. A host built from a random string under an ordinary-looking parent domain is easy to rotate and hard for victims to recognise or remember.
Only 3 of 92 VirusTotal engines flagged the host as of 2026-10-17: Forcepoint ThreatSeeker, Gridinsoft and SOCRadar. That is a thin signal, so most of the weight rests on crypto-focused blocklists. ScamSniffer, which tracks wallet-focused phishing, lists it independently alongside PhishDestroy. With antivirus coverage this low, many browsers and security tools will not yet warn visitors.
The parent domain acquency.com was registered through Name.com, Inc. on 2021-07-18, roughly five years before PhishDestroy flagged this subdomain. That gap points to an older domain being put to use rather than one registered for this campaign. Traffic runs through Cloudflare in the US, so the visible IP 188.114.97.3 belongs to Cloudflare's proxy and not to the server behind it. The certificate is a routine automated issue from Google Trust Services (WE1) and says nothing about whether the site is legitimate.
If you entered a password on this site, change it on the real service right away, turn on app-based 2FA, and sign out of other sessions. If you typed a seed phrase, treat that wallet as compromised and move any remaining funds to a new wallet created on a clean device. If you connected a wallet or signed anything, revoke the approvals you granted with a token-approval checker and watch for unexpected transfers. Defenders should block this acquency.com subdomain at DNS and proxy level, search mail and web logs for it, and report it to Cloudflare and Name.com for takedown.
Last checked
Reputasi Edge-IP tidak dikaitkan dengan domain ini.
joel.ns.cloudflare.comtani.ns.cloudflare.comLocation describes the IP network.
6c807680f9c52d93f3488ce8d8df4eeae4ead9807d4b9ad8fc176ba2622e4c45acquency.comSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Google PageSpeed Insights — mobile performance audit of ihgfnotexistsnotexists3216c8cb8a8-1669-4888-9584-d7052cf15662.acquency.com · checked Sep 9, 2026
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Compare what a browser and a crawler receive, and check for Keitaro traffic routing.
alive_content: raw=ok; http=200; via=https_proxy; server=cloudflare
ihgfnotexistsnotexists3216c8cb8a8-1669-4888-9584-d7052cf15662.acquency.com
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
Tidak diketahui→live_content
content_served
Tidak diketahui→live_content
content_served
Tidak diketahui→live_content
content_served
Tidak diketahui→live_content
content_served
Tidak diketahui→live_content
content_served
Tidak diketahui→live_content
content_served
Tidak diketahui→live_content
content_served
Tidak diketahui→live_content
content_served
Tidak diketahui→live_content
content_served
Tidak diketahui→live_content
content_served
Tidak diketahui→inactive
parked · parking_or_lifecycle_page
Tidak diketahui→inactive
parked · parking_or_lifecycle_page
Tidak diketahui→inactive
parked · parking_or_lifecycle_page
Tidak tersedia→Dapat dijangkau
Dapat dijangkau→Tidak tersedia
1→2
Dapat dijangkau
3/92 engine detections
View sourceNo threat flag
View sourcePD-20260909-4CB6C8
ihgfnotexistsnotexists3216c8cb8a8-1669-4888-9584-d7052cf15662.acquency.com
View sourcePage captured
View sourcePD-20260909-4CB6C8 Recipient: abuse@name.com Policy Violations: Illegal Activities: Active phishing operation targeting victims Fraud & Deception: Impersonation of legitimate services Identity Theft: Collection of credentials under false pretenses Applicable Laws (US): 18 U.S.C. § 1343 - Wire Fraud 18 U.S.C. § 1030 - Computer Fraud and Abuse Act (CFAA) 15 U.S.C. § 45 - FTC Act (Deceptive Practices) Federal laws prohibit wire fraud, computer fraud, and deceptive business practices. Action Required: This evidence-backed report demonstrates clear violations requiring suspension per your policies. Continued hosting exposes your organization to regulatory scrutiny and potential legal liability.
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Template-based draft · optional AI wording assistance requires separate consent
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Stop using the suspicious site. Open the real service through its official app or an address you already trust.
Keep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
ihgfnotexistsnotexists3216c8cb8a8-1669-4888-9584-d7052cf15662.acquency.com)Meskipun kamu belum mengetahui semua detailnya — tetap saja ajukan laporan. Informasi yang tidak lengkap tetap dapat membantu penyelidikan.
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanLaporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauPantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive
This report combines saved page captures, registration and network records, scanner results and PhishDestroy reporting history. Each source keeps its own observation date. Open a source report to inspect the original result.
The AI-assisted analysis was written on . It describes the evidence available at that time; later source checks can change.
A capture documents what was shown. A scanner result records that provider’s assessment at the time of its check. Neither a valid certificate nor a zero-detection result is a guarantee of safety.