Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@key-systems.net.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
last-word-wins[.]com
“Last Word Wins - On-Chain Competitive Messaging Game”
last-word-wins.com — Doğrulanmamış. Dolandırıcılık türü: Crypto Drainer. Kanıt özeti: VirusTotal 6/91 (alphaMountain.ai, Bfore.Ai PreCrime, Chong Lua Dao, CRDF, Gridinsoft); PhishDestroy score 68/100. Kayıt kuruluşu: Key-Systems.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
Analysis of the domain last-word-wins.com indicates it is an active phishing site classified as a crypto drainer, currently under investigation. The domain was registered on March 29, 2026, through Key-Systems GmbH and resolves to the IP address 66.241.125.102, hosted by Fly.io, Inc. in France. The site returns an HTTP 200 status, suggesting it is operational, and its page title, 'Last Word Wins - On-Chain Competitive Messaging Game,' aligns with the reported scam type targeting cryptocurrency users. Infrastructure analysis reveals the use of Node.js, Vue.js, and Nuxt.js frameworks, alongside hosting on Fly.io, which may aid defenders in identifying related campaigns. The domain is flagged on one security blocklist and has been assigned a trust score of 0/100 by Gridinsoft, reinforcing its malicious classification. While no detections were reported by the 94 vendors that scanned the domain on VirusTotal, the absence of detections does not confirm safety, and the domain remains active as of July 12, 2026. Nameservers ns1.hostingpalvelu.fi and ns2.hostingpalvelu.fi are associated with the domain, and it employs a Let's Encrypt SSL certificate (E7), which is common among both legitimate and malicious sites. Defenders should treat this domain as a confirmed threat, particularly in environments where cryptocurrency transactions occur. Monitoring for connections to 66.241.125.102 and the associated nameservers may help identify compromised systems or further phishing activity. Given the domain's recent registration and active status, continued vigilance is advised, and blocking access at the network level is recommended until further analysis confirms its takedown or reclassification.
Tehdit Müdahale Pipeline
Genel Engelleme Listesi Durumu
Kaydedilen görüntü
Etki Alanı Analizi
Teknik ayrıntılarDNS, SSL SAN’ları, zaman damgaları
ICANN OVERSIGHT
Akreditasyon ve RAA bağlamı
Akreditasyon ve RAA bağlamı
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tehdit İstihbaratı Çapraz Referansı · source references
Teknolojiler · 4 identified
JavaScript runtime built on Chrome V8 engine for server-side development.
Progressive JavaScript framework for building user interfaces.
Hybrid Vue framework for server-side rendering and static sites.
VirusTotal Analizi
Site Performans Analizi
Google PageSpeed Insights — mobile performance audit of last-word-wins.com · checked Mar 29, 2026
Kanıtlar ve Dış Raporlar
PD-20260329-E71DAB Recipient: abuse@key-systems.net Bu Siteden Etkilendiniz mi?
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
Yerel Yetkililere Bildirin
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Herhangi Bir Alan Adını Kontrol Et
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraOltalama Olayını Bildir
Şüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirCanlı Tehdit Akışı
Son kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleGelişmelerden Haberdar Olun, Güvende Kalın
Canlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin