REGISTRAR NEGLIGENCE · EGREGIOUS Global Domain Group LLC was notified 5 months ago — the threat is still operational.

Why this matters — ICANN RAA §3.18 obligation & victim-assistance

On 2026-02-18 14:15:49 UTC PhishDestroy delivered an evidence-backed abuse report (repeated 10 times, most recently 2026-02-18 14:15:49 UTC) to abuse@globaldomaingroup.com with VirusTotal detections, urlscan capture, legal violations, and full screenshot evidence. More than 5 months later, the phishing infrastructure remains reachable .

Under ICANN RAA §3.18 accredited registrars are contractually obliged to “take reasonable and prompt steps to investigate and respond appropriately to any reports of abuse.” Silence beyond 24 hours after a documented notification with verifiable evidence is not a timing issue — it is a policy decision to let the operation continue. PhishDestroy\'s position: where a registrar fails to act on clear evidence, the registrar has aligned itself with the operator of the scheme and bears co-responsibility for downstream harm caused to victims from the moment of notification onward.

Victim-assistance obligation. If Global Domain Group LLC doesn't consider the listed detections enough proof — that is interesting in itself, given the volume of independent vendor confirmations. But after 10 separate notifications over 5 months, with the operation still active, the registrar took no measurable action to mitigate the harm caused by their client. The reasonable next step is direct help to any identified victims — contact & payment-trail disclosure, abuse-thread transcripts, registrant data preservation — since the registrar chose, by inaction, to extend the window of damage.

Elapsed since first report

5 months

Reports sent

Latest case ID

PD-20260218-AA14E0

Current status

Serving traffic (alive)

Domain security & threat intelligence

makepex[.]com

فحص التصيد والأمان للنطاق makepex.com

“Makepex: Elon Musk’s Official Crypto Casino Powered by Blockchain”

12/95 VT OTX: 1 pulse Reachable · access restricted Feb 18, 2026 Unavailable since Mar 02, 2026 Genericcrypto احتيال على المقامرين Crypto Scam 10 Reports Sent CDN + more

Risk Score: 100 out of 100. Critical risk.

ملخص التقرير

makepex.com: أظهرت نتيجة VirusTotal أن 12 من أصل 95 محركًا رصد هذا النطاق. راجع DNS وSSL وجهة التسجيل وقوائم الحظر.

يبقى تحليل PhishDestroy AI المفصل أدناه باللغة الإنجليزية للحفاظ على السجل الجنائي الرقمي الأصلي.

PhishDestroy AI

HIGH

PhishDestroy first recorded makepex.com on Feb 18, 2026. This English evidence brief is rebuilt from the current structured observations stored for the report. The current stored risk score is 100/100.

The latest stored availability state is “Reachable · access restricted” (HTTP 403) on Aug 2, 2026 at 00:13 UTC. This is a reachability snapshot, not proof of the cause of any outage, restriction, or status change.

VirusTotal returned 12 detections from 95 scanners in the stored check on Jul 18, 2026 at 20:45 UTC. The independent blocklist snapshot recorded 0 matches across 10 configured external sources on Aug 2, 2026 at 00:20 UTC. PhishDestroy's own listing is excluded from that count. A zero-match snapshot is not a safety verdict.

Other stored evidence. Google Safe Browsing stored no positive flag on Mar 3, 2026 at 05:14 UTC. This time-bound result is not evidence of safety. AlienVault OTX stored 1 pulse reference on Mar 1, 2026 at 08:48 UTC. OTX pulses are community-intelligence references, not vendor verdicts. Spamhaus DBL stored the result DBL_PHISH on Jul 14, 2026 at 12:31 UTC. A URLScan capture is stored from Mar 25, 2026 at 12:42 UTC.

Stored context lists registrar Global Domain Group LLC, IP address 104.21.23.106, apparent target Genericcrypto. Except for the registration date, these fields do not share a source timestamp in this report and may change.

Treat these as stored, time-bound observations rather than a live safety guarantee. Source verdicts and reachability can change, and zero or missing vendor matches never prove that a domain is safe. Avoid interacting with the domain while uncertainty remains, and use the appeal process if this report is inaccurate.

VirusTotal

12 det.

OTX AlienVault

1 pulse

URLScan

Report ↗

Gridinsoft

1/100

Observed status

Reachable · access restricted 403

قائمة الإتلاف

Listed

Reports Sent

10 ignored

نطاق تغطية البيانات VirusTotal 12 / 95 URLQuery no detections OTX 1 pulse رادار CF suspicious URLScan report ready حجب عناوين DNS none SSL no cert WHOIS not parsed Screenshot لم يتم تسجيله سلسلة إعادة التوجيه not probed Gridinsoft 1/100

مؤشرات الأمان

Gridinsoft Analysis 1 / 100

Hosting SSL Certificate Cryptocurrency Financial Service Registration Form Casino Famous people Crypto Scam - High Risk

مسار الاستجابة للتهديدات Pipeline

Discovery

Checks

Reports

Availability

25/26

الاكتشاف والاستيعاب الاستباقي

تم استيعاب التهديد

1/1 ✓

تم استيعاب التهديد

makepex.com تم اكتشافها وإدراجها في قائمة الانتظار لإجراء تحليل شامل

Feb 18, 2026

Threat Intelligence Checks

URLScan.io Snapshot · Cloudflare Radar · Web Archive · VirusTotal · Google Safe Browsing · OTX Threat Intel · Brand Impersonation · Forensic Evidence Collected · Technical Analysis Recorded · Site Came Back Online · Cloudflare Radar Scan · Content Observed Unavailable

12/12 ✓

URLScan.io Snapshot

Submitted to urlscan.io — screenshot, DOM & HTTP transactions captured

Mar 25, 2026

رادار Cloudflare

Scanned via رادار Cloudflare — DNS, certificates & network data

Web Archive

Preserved in آلة الزمن — historical evidence archived

VirusTotal

12 / 95 vendors flagged on VirusTotal

Jul 18, 2026

Google Safe Browsing

Checked via تقرير الشفافية من Google

Mar 03, 2026

OTX Threat Intel

موجود في 1 OTX pulse on AlienVault OTX

Mar 01, 2026

Brand Impersonation

Impersonation of Genericcrypto

Forensic Evidence Collected

Stored evidence from URLScan.io, URLQuery, stored screenshot

Mar 25, 2026

Technical Analysis Recorded

The report contains stored technology or forensic-analysis results

Aug 02, 2026

Site Came Back Online

Domain is responding again — monitoring resumed

Jul 27, 2026

Cloudflare Radar Scan

Scanned via Cloudflare Radar — network analysis completed

Mar 07, 2026

Content Observed Unavailable

Monitoring recorded an unavailable response (HTTP 666); the cause was not independently established

Mar 02, 2026

Notification Records

Initial Abuse Report (#1) · ICANN Escalation #2 · ICANN Escalation #4 · ICANN Escalation #5 · ICANN Escalation #6 · ICANN Escalation #7 · ICANN Escalation #8 · ICANN Escalation #9 · ICANN Escalation #10 · ICANN Escalation #11 · 10 Reports Filed

11/11 ✓

Initial Abuse Report (#1)

Sent to 3 abuse contacts at Global Domain Group LLC with forensic evidence