Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is as139341_abuse@aceville.net.
The latest stored availability evidence still shows the domain reachable; 6 days has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
webupgrade394949-dp94sdn9spre[.]edgeone[.]cool
“Webmail Sign-in”
webupgrade394949-dp94sdn9spre.edgeone.cool — Non verificato. Simulazione del marchio: Genericemail; Tipo di truffa: Credential Phishing. Riepilogo delle prove: VirusTotal 18/91 (BitDefender, Cluster25, CRDF, CSIS Security Group, CTX AI); URLQuery 3 alerts; URLScan malicious verdict; Spamhaus DBL_PHISH; CF Radar malicious; PhishDestroy score 95/100.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
webupgrade394949-dp94sdn9spre.edgeone.cool is a subdomain of edgeone.cool. PhishDestroy first observed the hostname on Aug 14, 2026. Stored content metadata identifies Genericemail as the apparent target. The captured page title is “Webmail Sign-in”. Stored page analysis classifies the content as credential phishing. Current evidence score: 95/100 (critical).
Positive findings are stored from 5 sources: VirusTotal, Spamhaus DBL, Cloudflare Radar, URLQuery, and URLScan. VirusTotal recorded 18 detections among 91 engines: BitDefender, Cluster25, CRDF, CSIS Security Group, CTX AI, ESET, Emsisoft, Fortinet, G-Data, Gridinsoft, LevelBlue, MalwareURL, Netcraft, SOCRadar, Sophos, URLQuery, VIPRE, Webroot on Aug 20, 2026 at 03:10 UTC. Spamhaus DBL: DBL_PHISH on Aug 14, 2026 at 02:34 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the phishing category; its verdict timestamp was not retained. URLQuery recorded 3 threat-system alerts on Aug 14, 2026 at 00:30 UTC. URLScan returned a malicious verdict with score 100; scan metadata linked the capture to Genericemail and assigned phishing as its category on Aug 14, 2026 at 05:08 UTC. Non-positive and contextual checks: The separate external-blocklist snapshot contained no matches on Aug 20, 2026 at 02:20 UTC. Google Safe Browsing returned no flag on Aug 20, 2026 at 03:11 UTC.
The collector marked the hostname reachable on Aug 19, 2026 at 22:15 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 43.174.246.29 on AS139341 (ACE-AS-AP - ACE, SG). The recorded endpoint location is Singapore, SG. The stored server header is edgeone-pages. DOM analysis on Aug 14, 2026 at 02:22 UTC returned 88/100. The evidence archive retains 4 visual captures from PhishDestroy, URLScan, URLQuery, and Cloudflare Radar. TLS metadata lists DigiCert, Inc. as the certificate issuer with validity through Nov 19, 2026; checked Aug 14, 2026 at 01:02 UTC.
The content indicators and 5 positive source findings support the current Genericemail-themed credential phishing classification.
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | webupgrade394949-dp94sdn9spre.edgeone.cool |
malicious | Sinkholed |
| OpenDNS | webupgrade394949-dp94sdn9spre.edgeone.cool |
phishing | Phishing Block |
| DNS4EU | webupgrade394949-dp94sdn9spre.edgeone.cool |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Tecnologie · 2 identified
Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.
getbootstrap.com Confidenza al 100%JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.
www.jsdelivr.com Confidenza al 100%Analisi di VirusTotal
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of webupgrade394949-dp94sdn9spre.edgeone.cool · checked Aug 14, 2026
Dati e relazioni esterne
PD-20260814-1B56B9 Recipient: as139341_abuse@aceville.net Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo