ABUSE NOTICE · 7D+ OPEN Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.

Notification and current-status evidence

The sent-report ledger records the first outgoing report at 2026-04-13 04:28:08 UTC. It contains 9 outgoing records; the latest is dated 2026-04-13 04:32:21 UTC. The recorded recipient is abuse@trustname.com. The latest stored availability evidence still shows the domain reachable; 3 months has elapsed since the first outgoing report.

ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.

Elapsed since first report

3 months

Reports sent

Latest case ID

PD-20260413-26DFC5

Current status

HTTP 666 at latest stored check

Etki alanı güvenliği ve tehdit istihbaratı

pokups[.]com

pokups.com için kimlik avı ve güvenlik kontrolü

“Pokups: Elon Musk’s Official Crypto Casino Powered by Blockchain”

Tehdit kararı Kritik 100/100 kanıt puanı

Kullanılabilirlik Gizlenmiş · ulaşılabilir Gizleme kontrolleri aracılığıyla gözlemlenen ulaşılabilirlik

Risk sinyalleri

VirusTotal algılamaları: 12/91 Spamhaus DBL: DBL_PHISH Marka kimliğine bürünme: Genericcrypto Bilinen son aktif

12/91 VT URLQuery: 2 detections 13.04.2026 12.05.2026'den beri kullanılamıyor Genericcrypto Kumar Dolandırıcılığı Generic Phishing 9 Reports Sent Cloaking CDN

Risk puanı: 100 üzerinden 100. Risk düzeyi: Kritik.

Rapor özeti

pokups.com — Gizlenmiş · ulaşılabilir (HTTP 666). Marka kimliğine bürünme: Genericcrypto; Dolandırıcılık türü: Generic Phishing. Kanıt özeti: VirusTotal 12/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, ESET, Fortinet); URLQuery 2 det.; URLScan malicious verdict; Spamhaus DBL_PHISH; cloaking observed; PhishDestroy score 100/100. Kayıt kuruluşu: Fewmoretaps OU d/b/a T….

Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.

Kanıt özeti

KRİTİK

PhishDestroy first observed pokups.com on Apr 13, 2026. Stored content metadata identifies Genericcrypto as the apparent target. The captured page title is “Pokups: Elon Musk’s Official Crypto Casino Powered by Blockchain”. Stored page analysis classifies the content as generic phishing. Campaign clustering links the hostname to the Gambler Scam kit. Current evidence score: 100/100 (critical).

Positive findings are stored from 5 sources: VirusTotal, Spamhaus DBL, DNS security resolvers, URLQuery, and URLScan. VirusTotal recorded 12 detections among 91 engines: ADMINUSLabs, alphaMountain.ai, BitDefender, ESET, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, SOCRadar, Sophos, VIPRE on Jul 28, 2026 at 02:29 UTC. Spamhaus DBL: DBL_PHISH on Jul 13, 2026 at 18:37 UTC. DNS security checks returned 1 blocking result across 12 tested policies: Brand Ups; no observation timestamp was retained. URLQuery recorded 2 detections; no observation timestamp was retained. URLScan returned a malicious verdict with score 100; scan metadata assigned phishing as its category on Jul 29, 2026 at 03:08 UTC. Non-positive and contextual checks: Gridinsoft assigned a trust score of 1/100; no observation timestamp was retained. ScamAdviser assigned a trust score of 1/100 (Very Likely Unsafe); no observation timestamp was retained. The separate external-blocklist snapshot contained no matches on Aug 8, 2026 at 02:20 UTC. On Apr 13, 2026 at 05:28 UTC, Google Safe Browsing returned no flag; PhishStats returned no feed match.

Cloaking was recorded with HTTP 666 on Aug 7, 2026 at 22:14 UTC. The cloaking probe recorded content divergence conditional delivery at 1/100 on Aug 7, 2026 at 02:08 UTC: dead_http: raw=http_666; http=666; via=https_proxy; server=cloudflare. Registration records for the domain list Fewmoretaps OU d/b/a Trustname.com as the registrar and Apr 13, 2026 as the creation date. Registration and first observation occurred on the same UTC date. At collection time, the hostname resolved to 172.67.158.182 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Jun 28, 2026; checked Apr 13, 2026 at 08:00 UTC.

The content indicators and 5 positive source findings support the current Genericcrypto-themed generic phishing classification.

VirusTotal

12 det.

URLQuery

2 det.

DNS Security

1/12

URLScan

Rapor ↗

Gridinsoft

1/100

Scamadviser

1/100

TLS sertifikası

Let's Encrypt

Yaş

4 mo

Gözlemlenen durum

Gizlenmiş · ulaşılabilir 666

DestroyList

Listede

Reports Sent

Veri kapsamı VirusTotal 12 / 91 URLQuery 2 det. PhishStats checked — no match recorded OTX no community references CF Radarı scan completed URLScan capture saklanan rapor URLScan verdict malicious DNS engellemeleri 1/12 TLS valid certificate, 76d WHOIS 4 mo old Ekran görüntüsü 2 captures · 2 sources Yönlendirme zinciri araştırılmadı Gridinsoft 1/100 Scamadviser 1/100

Ağ Güvenliği İstihbaratı Registrar context

DNS Provider Blocks 1 / 12

Brand Ups

Registrar context Trustname

Stored registration data identifies Trustname / Fewmoretaps OÜ (IANA 4318) as the registrar. PhishDestroy maintains a separate registrar investigation; that material is contextual and is not an independent detection for this domain.

Trustname Investigation

Tehdit Müdahale Pipeline

Keşif

Checks

Reports

Kullanılabilirlik

22/23

URLScan.io Capture

Stored URLScan report with capture artifacts

URLScan Verdict

URLScan returned a malicious verdict · score 100

29.07.2026

Cloudflare Radar Report

A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.

VirusTotal

12/91 recorded on VirusTotal

28.07.2026

Google Safe Browsing

Checked via Google Şeffaflık Raporu

13.04.2026

DNS Security Blocks

Blocked by 1 of 12 checked DNS providers: Brand ups

Registrar Context: Trustname

Separate registrar research is available. Registrar association is contextual and is not scored as an independent detection.

Brand Impersonation

Impersonation of Genericcrypto

Forensic Evidence Collected

Stored evidence from URLScan.io, URLQuery, stored screenshot

Technical Analysis Recorded

Rapor, depolanan teknolojiyi veya adli analiz sonuçlarını içerir.

08.08.2026

Initial Abuse Report (#1)

Sent to 1 abuse contact at Fewmoretaps OU d/b/a Trustname.com with forensic evidence

abuse@trustname.com

13.04.2026

ICANN Escalation #2

Escalation #2 sent to 3 recipients including ICANN Compliance — follow-up record after a previous report