Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@spaceship.com.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
pdf-unlock[.]com
Pemeriksaan phishing dan keamanan pdf-unlock.com
“Remove PDF Password - Free & Secure | PDF Unlock Online”
pdf-unlock.com — Terakhir diketahui aktif (HTTP 301). Jenis penipuan: Credential Phishing. Ringkasan bukti: VirusTotal 9/91 (ADMINUSLabs, BitDefender, Chong Lua Dao, CRDF, CyRadar); URLQuery 2 alerts; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 93/100. Registrar: Spaceship.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
Analysis indicates that pdf-unlock.com was registered on March 14, 2026 and is currently active. The site presents a page titled "Remove PDF Password - Free & Secure | PDF Unlock Online," suggesting a credential‑phishing lure aimed at users seeking PDF password removal tools. The domain resolves to IP address 18.239.6.93, which belongs to Amazon.com, Inc. (AS16509) and is served through Amazon Web Services components including S3, CloudFront, and Unpkg. TLS is provided by a Let’s Encrypt certificate (R12), and the site redirects with HTTP 301 status. Security telemetry shows that 2 of 94 VirusTotal scanners flagged the domain, and it appears on three external blocklists, including PhishDestroy, MetaMask, and SEAL. Nameservers launch1.spaceship.net and launch2.spaceship.net confirm registration via Spaceship, Inc. While the exact phishing payload has not been publicly disclosed, the combination of recent registration, cloud hosting, low trust score (0/100), and confirmed blocklist presence characterizes the infrastructure as high‑risk. Defenders should proactively block pdf-unlock.com at DNS and proxy layers, monitor outbound connections to the associated IP range, and include the domain in threat‑intel feeds. Ongoing observation is advised to detect any evolution of the phishing campaign or associated infrastructure.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | www.pdf-unlock.com |
malicious | Sinkholed |
| Hagezi Threat Feed | pdf-unlock.com |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Teknologi · 4 identified
Cloud computing platform offering compute, storage, and networking services.
Fast CDN for everything on npm — serves raw files from npm packages.
Amazon Web Services CDN for low-latency content delivery.
Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of pdf-unlock.com · checked Mar 16, 2026
Bukti & Laporan Eksternal
PD-20260316-845769 Recipient: abuse@spaceship.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive