Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is domainabuse@tucows.com.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
fivepillarstoken[.]com
“Five Pillars DeFi - Investment Dashboard”
fivepillarstoken.com — Masqué · accessible (HTTP 307). Type d'arnaque : Crypto Scam. Résumé des preuves: VirusTotal 4/91 (alphaMountain.ai, ESET, Gridinsoft, SOCRadar); URLQuery 4 alerts; cloaking observed; PhishDestroy score 86/100. Bureau d’enregistrement: Tucows.
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
This domain, fivepillarstoken.com, is under investigation as an active crypto investment scam targeting users through a purported decentralized finance (DeFi) platform. Registered on March 22, 2026, via Tucows Domains Inc., the domain resolves to the IP address 216.150.16.1, hosted by Vercel, Inc. in the United States. Infrastructure analysis reveals the use of Vercel nameservers (ns1.vercel-dns.com, ns2.vercel-dns.com) and HSTS implementation, alongside a Let's Encrypt SSL certificate issued under the R12 intermediate. The page title, 'Five Pillars DeFi - Investment Dashboard,' explicitly frames the site as a financial dashboard, aligning with the reported scam classification of a crypto scam. Security vendor detections on VirusTotal indicate that 6 of 94 engines flag the domain as malicious, while it appears on one security blocklist. The domain currently returns an HTTP 307 redirect status, though the destination remains unconfirmed. Gridinsoft assigns a trust score of 1 out of 100, further corroborating its high-risk designation. No evidence of a known phishing kit or specific brand impersonation has been identified in the available data, though the site’s structure and stated purpose are consistent with fraudulent investment schemes. Defenders are advised to treat this domain as an active threat. Network-level blocking of the IP 216.150.16.1 and domain-based filtering are recommended. Given the domain’s recent registration and low detection coverage, monitoring for additional indicators—such as associated cryptocurrency wallet addresses or redirect chains—is warranted. The lack of widespread blocklisting suggests this campaign may still be in an early or targeted phase, requiring proactive mitigation to prevent user exposure.
Signaux de sécurité
Renseignements sur la sécurité réseau
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | www.fivepillarstoken.com |
malicious | Sinkholed |
| DNS4EU | www.fivepillarstoken.com |
malicious | Sinkholed |
| DNS4EU | fivepillarstoken.com |
malicious | Sinkholed |
| Hagezi Threat Feed | fivepillarstoken.com |
malicious | Sinkholed |
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 2 identified
Cloud platform for frontend deployment, optimized for Next.js.
HTTP Strict Transport Security — forces browsers to use HTTPS connections only.
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of fivepillarstoken.com · checked Jun 26, 2026
Données factuelles et rapports externes
PD-20260319-94B334 Recipient: domainabuse@tucows.com Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif