# paprnest.com — SUSPICIOUS

> paprnest.com is an active phishing site posing low risk. Stay vigilant and avoid interacting with this domain to protect your data.

## Summary
PhishDestroy identifies paprnest.com as an active phishing domain involved in generic phishing activities. Although currently assessed as low risk, phishing campaigns targeting unsuspecting users can lead to credential theft, financial loss, or malware infections. Awareness of this threat is crucial to prevent potential exploitation.

This domain was registered recently on July 20, 2025, through Ultahost, Inc., and resolves to the IP address 79.133.41.61. VirusTotal analysis shows 2 out of 95 security vendors flagging this domain, indicating some level of suspicion but limited consensus. The domain’s young age and registrar choice are consistent with common phishing infrastructure tactics, suggesting it is likely part of a broader malicious campaign leveraging fresh domains.

Users are advised to exercise caution and avoid clicking links or submitting any personal information on paprnest.com. Organizations should consider blocking this domain at network gateways and monitor for related phishing attempts. Maintaining updated security tools and user education remain key defenses against evolving phishing threats such as those associated with paprnest.com.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: alive (HTTP 200)
- Page title: Викачка вигрібних ям Київ | Замовити ☎️ +38 067 007 0068

## Domain Intelligence
- Registered: 2025-07-20 22:15:36
- Registrar: Ultahost, Inc.
- Country: US
- IP: 79.133.41.61
- Nameservers: ns1.ultahost.com ns2.ultahost.com ns3.ultahost.com ns4.ultahost.com

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Fortinet", "Seclookup"]
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Screenshot: https://urlscan.io/screenshots/019d01c4-6148-7349-88e4-2418eba91782.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/46022622-8af5-4da5-8df1-a3995805000c
- PhishDestroy: https://phishdestroy.io/domain/paprnest.com/
- LLM endpoint: https://phishdestroy.io/domain/paprnest.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/paprnest.com/
Last updated: 2026-03-19