Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@namecheap.com.
The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
polymarket[.]lever-labs[.]com
“Polymarket Field Guide — Onchain Prediction Markets”
polymarket.lever-labs.com — असत्यापित. ब्रांड प्रतिरूपण: Polymarket; घोटाले का प्रकार: Crypto Drainer. साक्ष्य सारांश: VirusTotal 15/91 (ChainPatrol, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLScan malicious verdict; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 95/100. रजिस्ट्रार: Namecheap.
मूल फॉरेंसिक रिकॉर्ड सुरक्षित रखने के लिए नीचे का विस्तृत PhishDestroy AI विश्लेषण अंग्रेज़ी में रखा गया है।
This domain, polymarket.lever-labs.com, is flagged as a high-risk generic phishing site specializing in cryptocurrency wallet-draining attacks. Analysis indicates it impersonates the legitimate Polymarket platform, a decentralized prediction market, to deceive users into connecting their wallets. The site likely employs a drainer kit designed to siphon funds upon interaction, a common tactic in crypto-phishing campaigns targeting Web3 users. No specific drainer kit variant has been confirmed, but the infrastructure aligns with known wallet-draining phishing operations. Infrastructure analysis reveals multiple technical indicators of compromise. The domain was registered on April 17, 2025, through NAMECHEAP INC and currently resolves to IP address 104.21.26.39, hosted on Cloudflare's network (AS13335). VirusTotal detection shows 2 out of 95 security vendors flagging the domain as malicious, while it appears on three independent security blocklists. The SSL certificate is issued by Google Trust Services (WE1), a common practice among phishing domains to appear legitimate. The page title 'Just a moment...' suggests the use of Cloudflare protection or a placeholder page masking the actual phishing content. As of the latest assessment, polymarket.lever-labs.com remains active and poses a significant risk to users. The domain is blocked by multiple security providers, including MetaMask and SEAL, indicating widespread recognition of its malicious nature. Response actions should include immediate blacklisting, DNS sinkholing, and user education to prevent wallet connections. Despite these measures, the domain's continued operation and Cloudflare hosting present an ongoing threat, particularly to users unaware of phishing tactics in the cryptocurrency space. Users are advised to verify domain authenticity and avoid interacting with any unsolicited links or wallet connection prompts.
धमकी प्रतिक्रिया पाइपलाइन
सार्वजनिक ब्लॉकलिस्ट स्थिति
सहेजा गया कैप्चर
डोमेन इंटेलिजेंस
तकनीकी विवरणडीएनएस, एसएसएल एसएएन, टाइमस्टैम्प
ICANN OVERSIGHT
Registration: lever-labs.com
प्रत्यायन और आरएए संदर्भ
प्रत्यायन और आरएए संदर्भ
Registrar accreditation and DNS abuse obligations
For the registrable domain lever-labs.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
वायरसटोटल विश्लेषण
साइट प्रदर्शन विश्लेषण
Google PageSpeed Insights — mobile performance audit of polymarket.lever-labs.com · checked May 28, 2026
साक्ष्य और बाहरी रिपोर्टें
PD-20260528-315F2F Recipient: abuse@namecheap.com क्या आप इस साइट से प्रभावित हुए?
यदि आपने खाता क्रेडेंशियल, व्यक्तिगत या भुगतान जानकारी दर्ज की है, या इस डोमेन से कोई फ़ाइल डाउनलोड की है, तो तुरंत कार्रवाई करें। घटना की रिपोर्ट करने और अपनी सुरक्षा करने में आपकी सहायता के लिए नीचे संसाधन दिए गए हैं।
अपने स्थानीय अधिकारियों को रिपोर्ट करें
आधिकारिक साइबर अपराध संपर्क, या एक शिकायत ड्राफ्ट बनाएं → प्राप्त करने के लिए अपना देश चुनें।
किसी भी डोमेन की जाँच करें
संग्रहीत ब्लॉकलिस्ट, WHOIS, DNS और सार्वजनिक स्कैन साक्ष्य का उपयोग करके खतरे का विश्लेषण
अभी स्कैन करेंफ़िशिंग की रिपोर्ट करें
संदिग्ध डोमेन हमारे थ्रेट डेटाबेस में जमा करें — समुदाय की सुरक्षा करें
रिपोर्ट करेंसीधा खतरा फीड
हाल की फ़िशिंग रिपोर्टें और उपलब्धता में परिवर्तन देखे गए
निगरानी करेंजानकारी में रहें, सुरक्षित रहें
लाइव खतरों की निगरानी करें या यदि आपको लगता है कि यह एक गलत सकारात्मक है तो इस लिस्टिंग को चुनौती दें।