ChainPatrol
Web-Check 
SOCRadar 
LeakIX 
MALICIOUS — CRITICAL
jackovo[.]com
The domain jackovo.com was registered on October 04, 2025 through Dominet (HK) Limited and currently resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc.
100/100 evidence score · Critical
- VirusTotal
- 13/95
- Blocklists
- No stored match
- Disponibilité
- Contenu indisponible · HTTP 502
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
Résumé du rapport
jackovo.com — Contenu indisponible (HTTP 502). Usurpation de l'identité de la marque : Genericcrypto; Type d'arnaque : Crypto Scam. Résumé des preuves: VirusTotal 13/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, ESET); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 100/100. Bureau d’enregistrement: Dominet (HK).
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
Evidence Analysis
jackovo.com Fake Crypto Casino Alert
Security analysis of jackovo.com covers observed phishing indicators, infrastructure evidence, current status, and defensive guidance.
The domain jackovo.com was registered on October 04, 2025 through Dominet (HK) Limited and currently resolves to the IP address 188.114.97.3, which belongs to AS13335 Cloudflare, Inc. in the United States. The site presents a page title of "Jackovo: Most Popular Online Crypto Casino Based on Blockchain," indicating that the malicious infrastructure is attempting to pose as a cryptocurrency gambling service. The TLS certificate is issued by Google Trust Services under the WE1 authority, confirming the use of standard HTTPS but offering no credibility beyond encryption. Infrastructure analysis reveals the domain is hosted behind Cloudflare, employing Cloudflare Browser Insights and standard Cloudflare services, and uses the nameservers angela.ns.cloudflare.com and dave.ns.cloudflare.com.
Reputation scoring from Gridinsoft assigns a trust score of 1 out of 100, reflecting extremely low confidence in the domain’s legitimacy. The site is identified as employing the "Gambler Scam" phishing kit, which is known to target users interested in crypto‑based betting platforms. Detection telemetry shows that 13 of 95 security vendors on VirusTotal have flagged the domain, and it appears on a single security blocklist. PhishDestroy has already taken the domain offline, and the current status is reported as offline.
While the exact page content has not been captured, the combination of the page title, scam kit, low trust score, and vendor detections provides strong evidence that jackovo.com is being used for a crypto‑scam operation. Defenders should add the domain to network‑level blocklists, monitor DNS queries for the associated IP and nameservers, and consider updating threat‑intelligence feeds with the observed indicators. Continuous observation of Cloudflare‑related activity originating from AS13335 is advisable to detect any re‑hosting attempts.
Stored source results
Recorded verdicts and infrastructure observations for this domain.
VirusTotal
13 det.
URLQuery
100 det.
URLScan
Gridinsoft
1/100
Certificat TLS
Expiré ou non vérifié -101d
Âge
10 mo
Statut observé
Contenu indisponible 502
DestroyList
Répertorié
Reports Sent
6
Couverture des données13 recorded checks
VirusTotal
13 / 95
URLQuery
100 det.
PhishStats
pas vérifié
OTX
no community references
CF Radar
scan completed
URLScan capture
rapport stocké
URLScan verdict
malicious
Blocs DNS
pas vérifié
TLS
Expiré ou non vérifié
WHOIS
10 mo old
Capture d'écran
2 captures · 2 sources
Chaîne de redirection
non sondé
Gridinsoft
1/100
Signaux de sécurité
Gridinsoft Analysis
1 / 100
Processus de réponse aux menaces Pipeline
Découverte
Checks
Reports
Disponibilité
22/22
Initial Abuse Report (#1)
Sent to 1 abuse contact at Dominet (HK) Limited with forensic evidence
domainabuse@service.aliyun.com
ICANN Escalation #2
Escalation #2 sent to 3 recipients including ICANN Compliance — follow-up record after a previous report
domainabuse@service.aliyun.comabuse@verisign-grs.comcompliance@icann.org
ICANN Escalation #3
Escalation #3 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
domainabuse@service.aliyun.comabuse@verisign-grs.comcompliance@icann.org
ICANN Escalation #4
Escalation #4 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
domainabuse@service.aliyun.comabuse@verisign-grs.comcompliance@icann.org
ICANN Escalation #5
Escalation #5 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
domainabuse@service.aliyun.comabuse@verisign-grs.comcompliance@icann.org
ICANN Escalation #6
Escalation #6 sent to 3 recipients including ICANN Compliance — follow-up record after multiple previous reports
domainabuse@service.aliyun.comabuse@verisign-grs.comcompliance@icann.org
6 Reports Filed
6 report records were stored over 181 days; current observed status: Contenu indisponible
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Domaine
URLScan Verdict
Malveillant
score 100 Phishing report ↗
Serveur / ASN
cloudflare · AS13335 CLOUDFLARENET, US
IP Context
Cloudflare shared edge
origin IP hidden
La réputation Edge-IP n’est pas attribuée à ce domaine.
Bureau d’enregistrement
Dominet (HK)
(HK)
(HK)
Adresse IP
188.114.97.3
CDN
Localisation
San Francisco, US
San Francisco, USRéseauAS13335 · Cloudflare, Inc.
L'adresse IP d'origine est cachée derrière un proxy CDN. Les résultats d’IP inversé pour l’adresse périphérique contiennent des locataires non liés ; trouver l’origine nécessite un DNS passif ou des données de transparence des certificats.
EnregistrementCréé 04/10/2025 (308d) — Expires 04/10/2026
Statut HTTP502 Error
Détails techniquesDNS, SAN SSL, horodatages
Première détection07/11/2025
DOM Analysisanalyzed 29/07/2026score 0/100
IoC Extractionscanned 02/08/20260 wallet · 0 Telegram IoCs
Submitted URLhttps://jackovo.com/
Serveurs de nomsangela.ns.cloudflare.comdave.ns.cloudflare.com
TLS Fingerprint
TLS Observationvalid from 30/01/2026scanned 11/03/2026
Case ID
ICANN OVERSIGHT
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Une accréditation est un contrat, pas un label de sécurité.
Vérifier les frais de l’ICANN
Lire le RAA §3.18
PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Historique des signalements d’abus · 6 stored reports over 105 days · click to expand
This timeline is built from stored outgoing report records. It documents timestamps and listed recipients, but does not by itself prove delivery, acknowledgement, or recipient action.
6 abuse reports filed over 181 days — latest observed status: Contenu indisponible
The records name Dominet (HK) Limited as a recipient or subject. ICANN Compliance appears in the recipient field for at least one record.
6
reports
181
days
ICANN CC
-
Report #1 Feb 8, 2026 · 18:27 UTCPhishing Abuse Report: jackovo[.]comdomainabuse@service.aliyun.com
-
Report #2 ICANN CC 148h still active Feb 14, 2026 · 23:00 UTCESCALATION #2 (148h active): Phishing - jackovo[.]comdomainabuse@service.aliyun.com abuse@verisign-grs.com compliance@icann.org
-
Report #3 ICANN CC 536h still active Mar 3, 2026 · 02:52 UTCESCALATION #3 (536h active): Phishing - jackovo[.]comdomainabuse@service.aliyun.com abuse@verisign-grs.com compliance@icann.org
-
Report #4 ICANN CC 572h still active Mar 4, 2026 · 15:09 UTCESCALATION #4 (572h active): Phishing - jackovo[.]comdomainabuse@service.aliyun.com abuse@verisign-grs.com compliance@icann.org
-
Report #5 ICANN CC 616h still active Mar 6, 2026 · 10:46 UTCESCALATION #5 (616h active): Phishing - jackovo[.]comdomainabuse@service.aliyun.com abuse@verisign-grs.com compliance@icann.org
-
Report #6 ICANN CC 2505h still active May 24, 2026 · 06:27 UTCESCALATION #6 (2505h active): Phishing - jackovo[.]comdomainabuse@service.aliyun.com abuse@verisign-grs.com compliance@icann.org
Record scope: the timeline documents outgoing records stored by PhishDestroy. Delivery, acknowledgement, and subsequent action require separate recipient or infrastructure evidence.
Technologies · 2 identified
Cloudflare Browser Insights
Analytics
RUM
Performance monitoring tool that measures website speed from real users.
www.cloudflare.com
Cloudflare
CDN
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.com
Detected via Cloudflare Radar · Wappalyzer engine
Signaler ce domaine
Envoyez des éléments de preuve et contribuez à protéger les autres
Analyse VirusTotal
13 / Les fournisseurs de sécurité 95 ont signalé ce domaine
View on VT
Last analyzed
ADMINUSLabs
alphaMountain.ai
BitDefender
CyRadar
ESET
Forcepoint ThreatSeeker
Fortinet
G-Data
Kaspersky
Lionic
Seclookup
Sophos
VIPRE
Preuves archivées
Wayback Machine Snapshot
Un instantané historique est disponible pour l’examen des preuves
Données factuelles et rapports externesIndependent lookups and source reports
Analyse de sécurité
Submitted Evidence Snapshot
Sent: Ledger records: 1
Case ID:
PD-1770575155-jackovo.com Recipient: domainabuse@service.aliyun.com OSINT et renseignement
DNS et réseau
Référencement naturel et nom de domaine
Victim safety and official reportingImmediate actions and verified reporting channels
If credentials were compromised, report immediately. Do not engage with recovery scammers.
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Action Fraud
Signaler la fraude et la cybercriminalité en Angleterre, au Pays de Galles et en Irlande du Nord
Contact centre0300 123 2040
PhishDestroy listing review Pas un rapport des forces de l'ordre
Recours en matière de nom de domaine
Demandez un examen si vous possédez ce domaine et pensez que la liste est incorrecte
Méfiez-vous des escrocs qui prétendent vous aider à récupérer vos biens ! Les criminels peuvent recontacter leurs victimes tout en se faisant passer pour des enquêteurs, des avocats ou des agents de recouvrement. Ne payez pas de frais initiaux et ne partagez pas vos informations d'identification. En savoir plus sur la fraude liée aux aides à la reprise →
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Annuaire de 97 pays
Brouillon assisté par l'IA : les détails de l'incident sont traités par le fournisseur d'IA
Examinez-le et soumettez-le vous-même
Infrastructure et rapports associésStored relationships and adjacent records
Autres rapports sur le bord partagé Cloudflare 6
Ces rapports renvoient à la même adresse IP périphérique partagée. Ils facilitent la découverte des rapports mais n'impliquent pas de propriété commune ni de serveur d'origine partagé.
Même bureau d’enregistrement: Dominet (HK) 6
Genericcrypto impersonation 8
These domains also target Genericcrypto users. View all Genericcrypto threats →
xamanwindowswallet.com Gambler Scam kit 8
Part of the Arnaque aux jeux de hasard phishing campaign. View all campaign domains →
treyspin.com Rapports récents sur les menaces 6
Rapports récemment ajoutés à partir de la base de données PhishDestroy. Ces liens de découverte n’impliquent pas d’infrastructure ou de propriété partagée.
lizsbs.shop 