⚠️
Este domínio foi sinalizado como malicioso
Detected by 16 security vendors and listed in 2 public blocklists. Exercise extreme caution — do not enter credentials or personal information. Create a complaint draft from this stored evidence, review it, and submit it yourself to the appropriate authority.
REGISTRAR NEGLIGENCE · EGREGIOUS Gname.com Pte. Ltd. was notified 2 months ago — the threat is still operational.
Why this matters — ICANN RAA §3.18 obligation

On PhishDestroy delivered an evidence-backed abuse report to abuse@powerline.hk with VirusTotal detections, urlscan capture, legal violations, and full screenshot evidence. More than 2 months later, the phishing infrastructure remains reachable .

Under ICANN RAA §3.18 accredited registrars are contractually obliged to “take reasonable and prompt steps to investigate and respond appropriately to any reports of abuse.” Silence beyond 24 hours after a documented notification with verifiable evidence is not a timing issue — it is a policy decision to let the operation continue. PhishDestroy\'s position: where a registrar fails to act on clear evidence, the registrar has aligned itself with the operator of the scheme and bears co-responsibility for downstream harm caused to victims from the moment of notification onward.

Elapsed since first report
2 months
Reports sent
1
Latest case ID
PD-20260514-220FCA
Current status
Serving traffic (alive)
Domain security & threat intelligence

javaadminpolymarket[.]17cai[.]net

Verificação de phishing e segurança de javaadminpolymarket.17cai.net

“mybestmarket Admin”

Threat verdict Critical 100/100 evidence score
Availability Last known active Current reachability is unverified
Risk signals
VirusTotal: 16/91 detections 2 stored blocklist matches Brand impersonation: Polymarket Last known active
16/91 VT URLQuery: 2 May 14, 2026 Unavailable since May 15, 2026 2 Blocklists Polymarket Phishing de credenciais HK HK + more
Resumo do relatório

VirusTotal: 16/91 detecções. Consulte os dados de segurança salvos.

A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.

Evidence Summary
CRITICAL
Ref
D78BA0D6
Score
100/100
Mode
Evidence v1

PhishDestroy first recorded javaadminpolymarket.17cai.net on May 14, 2026. This English evidence brief is rebuilt from the current structured observations stored for the report. The current evidence score, computed from those stored observations, is 100/100.

The latest stored availability state is “Last known active” on Aug 2, 2026 at 00:24 UTC. No conclusive HTTP response is stored, so current availability remains unverified.

VirusTotal returned 16 detections from 91 scanners in the stored check on Aug 1, 2026 at 04:45 UTC. The independent blocklist snapshot recorded 2 matches (MetaMask, SEAL) across 10 configured external sources on Aug 2, 2026 at 00:20 UTC. PhishDestroy's own listing is excluded from that count.

Other stored evidence. Google Safe Browsing stored no positive flag on May 14, 2026 at 21:51 UTC. This time-bound result is not evidence of safety. AlienVault OTX stored 0 pulse references on May 14, 2026 at 21:51 UTC. OTX pulses are community-intelligence references, not vendor verdicts. The Spamhaus DBL snapshot stored no positive result on Jul 13, 2026 at 16:36 UTC. That result is not evidence of safety. A URLScan capture is stored, but no capture timestamp is available.

Stored context lists registrar Gname.com Pte. Ltd., IP address 103.85.189.70, registration date Apr 2, 2026, apparent target Polymarket. Except for the registration date, these fields do not share a source timestamp in this report and may change.

Treat these as stored, time-bound observations rather than a live safety guarantee. Source verdicts and reachability can change, and zero or missing vendor matches never prove that a domain is safe. Avoid interacting with the domain while uncertainty remains, and use the appeal process if this report is inaccurate.

VirusTotal
VirusTotal
16 det.
URLQuery
URLQuery
2 det.
URLScan
URLScan
Gridinsoft
0/100
TLS certificate
Let's Encrypt
Idade
4 mo
Observed status
Last known active
PhishDestroy
DestroyList
Listed
Cobertura dos dados VirusTotal 16 / 91 URLQuery 2 det. OTX no pulses CF Radar clean URLScan capture stored report URLScan verdict checked — no malicious verdict Bloqueios de DNS not checked TLS valid certificate, 87d WHOIS 4 mo old Screenshot external capture Cadeia de redirecionamentos not probed Gridinsoft 0/100

Pipeline de resposta a ameaças

Discovery
Checks
Reports
Availability
12/13
Descoberta e captação preventivas
Ameaça detectada
1/1 ✓
Ameaça detectada
javaadminpolymarket.17cai.net detectados e colocados na fila para análise completa
May 14, 2026
Threat Intelligence Checks
URLScan.io Capture · URLScan Verdict · Cloudflare Radar · VirusTotal · Google Safe Browsing · Blocklist Detection · Brand Impersonation · Forensic Evidence Collected · Technical Analysis Recorded
9/9 ✓
URLScan.io Capture
Stored URLScan report with capture artifacts
URLScan Verdict
URLScan returned no malicious verdict; this provider result is not a safe-domain determination · score 0
Jul 29, 2026
Cloudflare Radar
Scanned via Cloudflare Radar — DNS, certificates & network data
VirusTotal
16 / 91 vendors flagged on VirusTotal
Aug 01, 2026
Google Safe Browsing
May 14, 2026
Detecção de lista de bloqueio
Encontrado em 2 blocklists: MetaMask, SEAL
Aug 02, 2026
Brand Impersonation
Impersonation of Polymarket
Forensic Evidence Collected
Stored evidence from URLScan.io, URLQuery, stored screenshot
Technical Analysis Recorded
The report contains stored technology or forensic-analysis results
Aug 02, 2026
Notification Records
Sent Report Recorded
1/1 ✓
Sent Report Recorded
Stored sent-report record for registrar Gname.com Pte. Ltd., hosting provider, 2 abuse contacts
abuse@powerline.hkcomplaint@gname.com
May 14, 2026
Publicação e disponibilidade
DestroyList Published · Availability Unverified
1/2
Lista de Destruição Publicada
May 14, 2026
Availability Unverified
The latest response is insufficient to classify current availability

Status da lista de bloqueios pública

Coleta de evidências

Stored Capture
2026-05-14 21:50 UTC
Malicious · 16/91 engines
Forensic screenshot of javaadminpolymarket.17cai.net showing the phishing page layout
IP: 103.85.189.70
Gname.com Pte. Ltd.
121d old
Let's Encrypt

Inteligência de Domínios

Domainjavaadminpolymarket.17cai.net
URLScan Verdict No malicious verdict recorded score 0 report ↗
Server / ASN nginx · AS132839 POWER LINE DATACENTER
IP Reputation abuse score 0/100 0 reports checked Jul 13, 2026
Registrar (base domain) Gname US(US)
IP Address 103.85.189.70 HK
GeoHK Hong Kong, HK
NetworkAS132839 · Powerline
Registration (base domain)17cai.net · Criado Apr 02, 2026 (121d)
Elapsed Since First Report 3h
What we count Raw elapsed time since the first stored abuse report. It is not a registrar response-time measurement. Latest observed status: Last known active.
What each report contains Stored outgoing report records may reference evidence available at the time, such as vendor verdicts, registration data, hosting details, classifications, or screenshots. This page does not infer the exact payload delivered, receipt, acknowledgement, or action by a recipient.
Detalhes técnicosDNS, SANs do SSL, carimbos de data e hora
Detectado pela primeira vezMay 14, 2026
Nameserversa3.share-dns.comb3.share-dns.net
TLS Fingerprint8f73ddd44af2df40f23192ba4341a66bc7eb9079…
Case IDPD-20260514-220FCA
Page Title
mybestmarket Admin
TLS Certificate
Valid transport encryption · Issued by Let's Encrypt · valid for 87 days
Tecnologias · 3 identified
Vue.js
JavaScript frameworks

Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.

vuejs.org 100% confidence
Nginx
Web servers Reverse proxies

Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.

nginx.org 100% confidence
HSTS
Security

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

www.rfc-editor.org 100% confidence
Detected via Cloudflare Radar · Wappalyzer engine
Denunciar este domínio Envie evidências e ajude a proteger outras pessoas

Análise do VirusTotal

16 / 91 security vendors flagged this domain
View on VT
ADMINUSLabs
ChainPatrol
alphaMountain.ai
BitDefender
Chong Lua Dao
CRDF
CyRadar
ESET
Fortinet
G-Data
Gridinsoft
Kaspersky
Lionic
SOCRadar
Sophos
VIPRE
Análise de desempenho do site

Google PageSpeed Insights — mobile performance audit of javaadminpolymarket.17cai.net · checked May 14, 2026

73
Needs Work
Performance
FCP
1.17s
First Contentful Paint
LCP
3.93s
Largest Contentful Paint
CLS
0.037
Cumulative Layout Shift
TBT
265ms
Total Blocking Time
SI
10.61s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Evidências e relatórios externos Open external tools

Você foi afetado por este site?

Você não está sozinho e não há nada de que se envergonhar. Os golpistas são criminosos sofisticados que se aproveitam da confiança alheia. Relatar sua experiência é a arma mais poderosa contra a fraude — sua denúncia pode impedir que outras pessoas se tornem vítimas e ajudar as autoridades a tomarem medidas. O silêncio é a maior vantagem do golpista. Quebre isso.

If you entered account credentials, personal or payment information, or downloaded a file from this domain, take immediate action. Below are resources to help you report the incident and protect yourself.

Cuidado com os golpistas que prometem recuperação! Criminals may contact victims again while pretending to be investigators, lawyers, or recovery agents. Do not pay upfront fees or share credentials. Saiba mais sobre fraudes relacionadas à recuperação →

Notifique as autoridades locais

Selecione seu país para obter contatos oficiais para casos de crimes cibernéticos, or create a complaint draft →

Selecione seu país...
Mais de 180 países
Zero-PII — seus dados nunca saem do navegador Review and submit it yourself

About This Report: javaadminpolymarket.17cai.net

This report presents the latest stored evidence available to PhishDestroy. Source timestamps are shown where available; availability and vendor verdicts can change after collection.

The site displays a page titled “mybestmarket Admin”, which may be designed to impersonate Polymarket.

javaadminpolymarket.17cai.net has been flagged by 16 security vendors as of August 1, 2026.

Se você acredita que esta listagem esteja incorreta, você pode apresentar um recurso. Para obter mais informações sobre nossa metodologia, acesse nosso Página de perguntas frequentes.

Verificar qualquer domínio

Threat analysis using stored blocklist, WHOIS, DNS, and public scan evidence

Digitalize agora

Denunciar phishing

Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade

Report

Feed de ameaças em tempo real

Recent phishing reports and observed availability changes

Monitor

Mantenha-se informado, mantenha-se seguro

Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo

Feed de ameaças em tempo real Recorrer deste anúncio
HTML · IFRAME

Incorporar este relatório

Compartilhe essas informações sobre ameaças em seu site ou blog

embed.html
<iframe
  src="https://phishdestroy.io/pt-br/embed/domain/javaadminpolymarket.17cai.net"
  title="PhishDestroy threat report for javaadminpolymarket.17cai.net"
  width="100%" height="320"
  loading="lazy"
  referrerpolicy="no-referrer"
  sandbox="allow-same-origin allow-popups allow-popups-to-escape-sandbox"
  style="border:0;border-radius:12px;max-width:100%"
></iframe>