REGISTRAR NEGLIGENCE · EGREGIOUS Global Domain Group LLC was notified 3 months ago — the threat is still operational.

Why this matters — ICANN RAA §3.18 obligation & victim-assistance

On 2026-04-04 21:06:46 UTC PhishDestroy delivered an evidence-backed abuse report (repeated 7 times, most recently 2026-04-04 21:06:46 UTC) to abuse@verisign-grs.com with the evidence stored for the case at that time. More than 3 months later, the phishing infrastructure remains reachable .

Under ICANN RAA §3.18 accredited registrars are contractually obliged to “take reasonable and prompt steps to investigate and respond appropriately to any reports of abuse.” Silence beyond 24 hours after a documented notification with verifiable evidence is not a timing issue — it is a policy decision to let the operation continue. PhishDestroy\'s position: where a registrar fails to act on clear evidence, the registrar has aligned itself with the operator of the scheme and bears co-responsibility for downstream harm caused to victims from the moment of notification onward.

Victim-assistance obligation. If Global Domain Group LLC doesn't consider the listed detections enough proof — that is interesting in itself, given the volume of independent vendor confirmations. But after 7 separate notifications over 3 months, with the operation still active, the registrar took no measurable action to mitigate the harm caused by their client. The reasonable next step is direct help to any identified victims — contact & payment-trail disclosure, abuse-thread transcripts, registrant data preservation — since the registrar chose, by inaction, to extend the window of damage.

Elapsed since first report

3 months

Reports sent

Latest case ID

PD-20260404-D39625

Current status

Serving traffic (alive)

Keamanan domain dan intelijen ancaman

levopex[.]com

Pemeriksaan phishing dan keamanan levopex.com

“Levopex: Elon Musk’s Official Crypto Casino Powered by Blockchain”

Putusan ancaman Kritis 98/100 skor bukti

Ketersediaan Terakhir diketahui aktif Pengamatan keterjangkauan tersimpan terbaru

Sinyal risiko

Deteksi Total Virus: 11/91 Peniruan identitas merek: Genericcrypto Terakhir diketahui aktif

11/91 VT 05/04/2026 Genericcrypto Penipuan Terkait Perjudian Social Media Phishing 7 Reports Sent CDN

Skor risiko: 98 dari 100. Tingkat risiko: Kritis.

Ringkasan laporan

levopex.com: 11 dari 91 pemindai VirusTotal menandai domain ini. Tinjau DNS, SSL, registrar, daftar blokir, dan data ancaman.

Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.

Evidence Summary

CRITICAL

PhishDestroy first recorded levopex.com on Apr 4, 2026. This English evidence brief is rebuilt from the current structured observations stored for the report. The current evidence score, computed from those stored observations, is 98/100.

The latest stored availability state is “Last known active” (HTTP 200) on Aug 1, 2026 at 22:28 UTC. This is a reachability snapshot, not proof of the cause of any outage, restriction, or status change.

VirusTotal returned 11 detections from 91 scanners in the stored check on Jul 28, 2026 at 03:13 UTC. The independent blocklist snapshot recorded 0 matches across 10 configured external sources on Aug 2, 2026 at 06:20 UTC. PhishDestroy's own listing is excluded from that count. A zero-match snapshot is not a safety verdict.

Other stored evidence. Google Safe Browsing stored no positive flag on Jun 26, 2026 at 09:19 UTC. This time-bound result is not evidence of safety. AlienVault OTX stored 0 pulse references on Apr 4, 2026 at 22:09 UTC. OTX pulses are community-intelligence references, not vendor verdicts. The Spamhaus DBL snapshot stored no positive result on Jul 13, 2026 at 22:31 UTC. That result is not evidence of safety. A URLScan capture is stored, but no capture timestamp is available.

Stored context lists registrar Global Domain Group LLC, IP address 188.114.96.3, registration date Apr 4, 2026, apparent target Genericcrypto. Except for the registration date, these fields do not share a source timestamp in this report and may change.

Treat these as stored, time-bound observations rather than a live safety guarantee. Source verdicts and reachability can change, and zero or missing vendor matches never prove that a domain is safe. Avoid interacting with the domain while uncertainty remains, and use the appeal process if this report is inaccurate.

VirusTotal

11 det.

URLScan

Laporan ↗

Gridinsoft

1/100

Sertifikat TLS

Let's Encrypt

Usia

4 mo

Status terpantau

Terakhir diketahui aktif 200

Daftar Hapus

Terdaftar

Reports Sent

7 ignored

Cakupan data VirusTotal 11 / 91 URLQuery laporan disimpan — putusan terperinci menunggu keputusan OTX no community references CF Radar scan completed URLScan capture laporan yang disimpan URLScan verdict malicious Pemblokiran DNS 12 diperiksa — tidak ada blokir TLS valid certificate, 44d WHOIS 4 mo old Screenshot 2 captures · 2 sources Rantai pengalihan tidak diselidiki Gridinsoft 1/100

Alur Tanggapan Ancaman Pipeline

Discovery

Checks

Reports

Ketersediaan

20/21

URLScan.io Capture

Stored URLScan report with capture artifacts

URLScan Verdict

URLScan returned a malicious verdict · score 100

29/07/2026

Cloudflare Radar Report

A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.

Web Archive

Preserved in Wayback Machine — historical evidence archived

VirusTotal

11/91 recorded on VirusTotal

28/07/2026

Google Safe Browsing

Checked via Laporan Transparansi Google

26/06/2026

Brand Impersonation

Impersonation of Genericcrypto

Forensic Evidence Collected

Stored evidence from URLScan.io, URLQuery, stored screenshot

Technical Analysis Recorded

Laporan tersebut berisi teknologi tersimpan atau hasil analisis forensik.

02/08/2026

VT Detection +12

+12 new detections (2 → 14): ADMINUSLabs, BitDefender, CRDF, Chong Lua Dao +8

26/06/2026

Initial Abuse Report (#1)

Sent to 3 abuse contacts at Global Domain Group LLC with forensic evidence