REGISTRAR NEGLIGENCE · EGREGIOUS Global Domain Group LLC was notified 3 months ago — the threat is still operational.

Why this matters — ICANN RAA §3.18 obligation & victim-assistance

On 2026-04-04 21:06:46 UTC PhishDestroy delivered an evidence-backed abuse report (repeated 8 times, most recently 2026-04-04 21:06:46 UTC) to abuse@verisign-grs.com with VirusTotal detections, urlscan capture, legal violations, and full screenshot evidence. More than 3 months later, the phishing infrastructure remains reachable .

Under ICANN RAA §3.18 accredited registrars are contractually obliged to “take reasonable and prompt steps to investigate and respond appropriately to any reports of abuse.” Silence beyond 24 hours after a documented notification with verifiable evidence is not a timing issue — it is a policy decision to let the operation continue. PhishDestroy\'s position: where a registrar fails to act on clear evidence, the registrar has aligned itself with the operator of the scheme and bears co-responsibility for downstream harm caused to victims from the moment of notification onward.

Victim-assistance obligation. If Global Domain Group LLC doesn't consider the listed detections enough proof — that is interesting in itself, given the volume of independent vendor confirmations. But after 8 separate notifications over 3 months, with the operation still active, the registrar took no measurable action to mitigate the harm caused by their client. The reasonable next step is direct help to any identified victims — contact & payment-trail disclosure, abuse-thread transcripts, registrant data preservation — since the registrar chose, by inaction, to extend the window of damage.

Elapsed since first report

3 months

Reports sent

Latest case ID

PD-20260404-D39625

Current status

Serving traffic (alive)

Domain security & threat intelligence

levopex[.]com

levopex.com 피싱 및 보안 점검

“Levopex: Elon Musk’s Official Crypto Casino Powered by Blockchain”

Threat verdict Critical 98/100 evidence score

Availability Last known active Latest stored reachability observation

Risk signals

VirusTotal: 11/91 detections Brand impersonation: Genericcrypto Last known active

11/91 VT Apr 05, 2026 Genericcrypto 도박 사기 Social Media Phishing 7 Reports Sent

CA + more

Risk Score: 98 out of 100. Critical risk.

보고서 요약

levopex.com: VirusTotal 엔진 91개 중 11개가 이 도메인을 탐지했습니다. DNS, SSL, 등록기관, 차단 목록, 위협 정보를 확인하세요.

원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.

Evidence Summary

CRITICAL

PhishDestroy first recorded levopex.com on Apr 5, 2026. This English evidence brief is rebuilt from the current structured observations stored for the report. The current evidence score, computed from those stored observations, is 98/100.

The latest stored availability state is “Last known active” (HTTP 200) on Aug 2, 2026 at 00:28 UTC. This is a reachability snapshot, not proof of the cause of any outage, restriction, or status change.

VirusTotal returned 11 detections from 91 scanners in the stored check on Jul 28, 2026 at 05:13 UTC. The independent blocklist snapshot recorded 0 matches across 10 configured external sources on Aug 2, 2026 at 00:20 UTC. PhishDestroy's own listing is excluded from that count. A zero-match snapshot is not a safety verdict.

Other stored evidence. Google Safe Browsing stored no positive flag on Jun 26, 2026 at 11:19 UTC. This time-bound result is not evidence of safety. AlienVault OTX stored 0 pulse references on Apr 5, 2026 at 00:09 UTC. OTX pulses are community-intelligence references, not vendor verdicts. The Spamhaus DBL snapshot stored no positive result on Jul 14, 2026 at 00:31 UTC. That result is not evidence of safety. A URLScan capture is stored, but no capture timestamp is available.

Stored context lists registrar Global Domain Group LLC, IP address 188.114.96.3, registration date Apr 4, 2026, apparent target Genericcrypto. Except for the registration date, these fields do not share a source timestamp in this report and may change.

Treat these as stored, time-bound observations rather than a live safety guarantee. Source verdicts and reachability can change, and zero or missing vendor matches never prove that a domain is safe. Avoid interacting with the domain while uncertainty remains, and use the appeal process if this report is inaccurate.

VirusTotal

11 det.

URLScan

Report ↗

Gridinsoft

1/100

TLS certificate

Let's Encrypt

연령

4 mo

Observed status

Last known active 200

DestroyList

Listed

Reports Sent

7 ignored

데이터 적용 범위 VirusTotal 11 / 91 URLQuery checked — no match OTX no pulses CF 레이더 suspicious URLScan capture stored report URLScan verdict malicious DNS 차단 12 checked — no blocks TLS valid certificate, 44d WHOIS 4 mo old Screenshot external capture 리디렉션 체인 not probed Gridinsoft 1/100

위협 대응 Pipeline

Discovery

Checks

Reports

Availability

20/21

사전 탐색 및 수집

위협 탐지됨

1/1 ✓

위협 탐지됨

levopex.com 탐지되어 전체 분석을 위해 대기열에 추가됨

Apr 05, 2026

Threat Intelligence Checks

URLScan.io Capture · URLScan Verdict · Cloudflare Radar · Web Archive · VirusTotal · Google Safe Browsing · Brand Impersonation · Forensic Evidence Collected · Technical Analysis Recorded · VT Detection +12

10/10 ✓

URLScan.io Capture

Stored URLScan report with capture artifacts

URLScan Verdict

URLScan returned a malicious verdict · score 100

Jul 29, 2026

Cloudflare Radar

Scanned via Cloudflare Radar — DNS, certificates & network data

Web Archive

Preserved in 웨이백 머신 — historical evidence archived

VirusTotal

11 / 91 vendors flagged on VirusTotal

Jul 28, 2026

Google Safe Browsing

Checked via 구글 투명성 보고서

Jun 26, 2026

Brand Impersonation

Impersonation of Genericcrypto

Forensic Evidence Collected

Stored evidence from URLScan.io, URLQuery, stored screenshot

Technical Analysis Recorded

The report contains stored technology or forensic-analysis results

Aug 02, 2026

VT Detection +12

+12 new detections (2 → 14): ADMINUSLabs, BitDefender, CRDF, Chong Lua Dao +8

Jun 26, 2026

Notification Records

Initial Abuse Report (#1) · ICANN Escalation #3 · ICANN Escalation #4 · ICANN Escalation #5 · ICANN Escalation #6 · ICANN Escalation #7 · ICANN Escalation #8 · 7 Reports Filed

8/8 ✓

Initial Abuse Report (#1)

Sent to 3 abuse contacts at Global Domain Group LLC with forensic evidence