# prepontimeusa.com — Recorded security evidence | PhishDestroy Content language: English Canonical HTML report: https://phishdestroy.io/domain/prepontimeusa.com/ Machine-readable companion: https://phishdestroy.io/domain/prepontimeusa.com/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-11-02 04:25:25 UTC - Last availability or vendor check: 2026-11-02 04:25:25 UTC - Stored record updated: 2026-11-02 06:14:35 UTC - VirusTotal detections in the stored snapshot: 15/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: checked_clean ## Stored infrastructure - Observed IP address: 179.61.227.233 - Registrar in stored WHOIS data: NAMECHEAP INC - Registration date in stored WHOIS data: 2025-11-03 14:58:40 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a19a80-59fb-772c-87dc-3e7dcc13f98e/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/prepontimeusa.com - Certificate Transparency search: https://crt.sh/?q=%25.prepontimeusa.com - Web Archive lookup: https://web.archive.org/web/*/https://prepontimeusa.com/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Public report package PhishDestroy stores a record for prepontimeusa.com. Source observations are dated separately; missing checks do not establish safety. PhishDestroy stores a record for prepontimeusa.com. Source observations are dated separately; missing checks do not establish safety. A reviewed analysis is not available for this text revision. Consult the dated source records below. Package revision: 5ee0fa6fc511c247d583c3fc8c99ba6a5cd4f033b6a3d17e2ccd94f668dc9cae Source facts (timestamps as stored): {"record_id":1738644,"first_recorded_at":"2026-11-02 05:25:25","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":15,"denominator":92,"malicious":15,"suspicious":0,"vendors":{"VIPRE":"phishing","G-Data":"phishing","Lionic":"phishing","Sophos":"phishing","CyRadar":"phishing","Webroot":"malicious","Fortinet":"phishing","SOCRadar":"malicious","Seclookup":"malicious","Gridinsoft":"phishing","ADMINUSLabs":"malicious","BitDefender":"phishing","Chong Lua Dao":"malicious","alphaMountain.ai":"phishing","Forcepoint ThreatSeeker":"phishing"},"observed_at":"2026-10-26T00:29:08Z","checked_at":"2026-11-02 07:13:31","fetched_at":"2026-11-02T06:13:25Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":15,"denominator":92,"malicious":null,"suspicious":null,"vendors":["ADMINUSLabs","alphaMountain.ai","BitDefender","Chong Lua Dao","CyRadar","Forcepoint ThreatSeeker","Fortinet","G-Data","Gridinsoft","Lionic","Seclookup","SOCRadar","Sophos","VIPRE","Webroot"],"observed_at":"2026-10-26 00:29:08","checked_at":"2026-11-02 07:13:31","fetched_at":"2026-11-02 06:13:31","time_basis":"as stored; legacy timezone not established"}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-02 07:13:50"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"source":"stored HTTP observation","state":"alive","observed_at":"2026-11-02 05:25:25"}} ## Stored page captures - Stored capture: https://i.ibb.co/nNZBhYW2/26fb1d1ad678.png - URLScan · 2026-11-02: https://screenshots.phishdestroy.io/us/01a19a80-59fb-772c-87dc-3e7dcc13f98e.png Captured: 2026-11-02 04:24:36 UTC Source report: https://urlscan.io/result/01a19a80-59fb-772c-87dc-3e7dcc13f98e/ SHA-256: 1f5fd1672bc34713fb21d30e28c50367b5222a29ca9e2b090d3ea94b29cafa2e - URLScan · 2026-11-02: https://screenshots.phishdestroy.io/us/01a19a6b-94a6-77cb-af66-5f2a2cd36a9b.png Captured: 2026-11-02 04:02:01 UTC Source report: https://urlscan.io/result/01a19a6b-94a6-77cb-af66-5f2a2cd36a9b/ SHA-256: 04d8fdd7fd61a76d3ed465ef1fe3a9a40dd2a355caefe2d325d5fd980ed711da - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/48f2da37-dfc8-4071-b6c3-385013d0603c.png Captured: 2026-11-02 04:57:39 UTC Source report: https://radar.cloudflare.com/scan/48f2da37-dfc8-4071-b6c3-385013d0603c SHA-256: a5db7ab655d3900bfb2bf44f8483ca7ce06fc6f795376f14b777be50f1f0af62 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-11-02T04:26:47Z", "uuid": "01a19a80-59fb-772c-87dc-3e7dcc13f98e", "scanned_at": "2026-11-02T04:24:36Z", "final_url": "https://prepontimeusa.com/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://prepontimeusa.com/", "from": "http://prepontimeusa.com/", "status": 307 } ], "ip": "179.61.227.233", "domains": [ "www.youtube-nocookie.com", "fonts.gstatic.com", "www.google.com", "fonts.googleapis.com", "yt3.ggpht.com", "www.gstatic.com", "jnn-pa.googleapis.com", "i.ytimg.com" ], "ips": [ "142.251.152.119", "192.178.183.190", "142.250.154.94", "192.178.183.95", "179.61.227.233" ], "asns": [ "15169", "399486" ], "countries": [ "US", "IN" ], "link_domains": [ "discord.gg", "www.youtube.com" ], "social": [ "https://discord.gg/kmSCe98n7S", "https://www.youtube.com/watch" ], "doc_hash": "b9a2c4a01d97982aa739258159d3fa2b501d085e985b54daac8bae6ca0b1853c", "script_hashes": [ "c585246d1fa83c7ac39031d947a19447dd98539a496518c9301a8161022d2bf5" ], "cookies": [ "lgm_sid" ], "tls": { "san": [ "lgmshop.fr" ], "cipher": "AES_256_GCM", "issuer": "YR1", "subject": "lgmshop.fr", "protocol": "TLS 1.3", "valid_to": "2027-01-22T23:11:54Z", "valid_from": "2026-10-24T23:11:55Z" }, "domain_age_days": 1898, "apex_age_days": 1898, "tls_age_days": 8, "tls_valid_days": 89, "requests": 27, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 90, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12", "content-type": "text/html; charset=UTF-8", "strict-transport-security": "max-age=31536000; includeSubDomains", "content-security-policy": "default-src 'self'; script-src 'self' 'nonce-Z20JmIvlc/d3JMX0KCC4OA==' https://www.paypal.com https://www.sandbox.paypal.com https://*.paypal.com https://*.paypalobjects.com https://cdnjs.cloudflare.c", "x-frame-options": "SAMEORIGIN\nSAMEORIGIN", "x-content-type-options": "nosniff\nnosniff", "referrer-policy": "strict-origin-when-cross-origin", "permissions-policy": "camera=(), microphone=(), geolocation=(), payment=(self \"https://www.paypal.com\" \"https://www.sandbox.paypal.com\")", "cross-origin-opener-policy": "same-origin", "cross-origin-resource-policy": "same-origin" } }, "cf": { "v": 1, "fetched_at": "2026-11-02T04:59:30Z", "uuid": "48f2da37-dfc8-4071-b6c3-385013d0603c", "scanned_at": "2026-11-02T04:57:39Z", "final_url": "https://prepontimeusa.com/", "history": [ { "url": "https://prepontimeusa.com/", "status": 0 } ], "dom_hash": "0be15d34945b061b4688e4c7a258d982bf21eeec94f047738c21f26a19145958", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "prepontimeusa.com", "type": "A", "value": "179.61.227.233" } ], "dnssec_valid": false, "whois": { "registrar": "NameCheap, Inc.", "created": "2025-11-03T15:58:40Z", "updated": "2025-11-03T15:58:44Z", "expires": "2026-11-03T15:58:40Z", "nameservers": [ "dns1.registrar-servers.com", "dns2.registrar-servers.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-11-02T06:13:25Z", "analysis_at": "2026-10-26T00:29:08Z", "stats": { "timeout": 0, "harmless": 46, "malicious": 15, "suspicious": 0, "undetected": 31 }, "detections": { "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "malicious", "Seclookup": "malicious", "Gridinsoft": "phishing", "ADMINUSLabs": "malicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "categories": { "alphaMountain.ai": "Phishing (alphaMountain.ai)" }, "created": "2025-11-03T00:00:00Z", "updated": "2025-11-03T00:00:00Z", "first_seen": "2024-03-06T04:41:36Z", "dns": [ { "ttl": 1800, "type": "MX", "value": "eforward2.registrar-servers.com", "priority": 10 }, { "ttl": 1799, "type": "A", "value": "179.61.227.233" }, { "ttl": 1800, "type": "NS", "value": "dns2.registrar-servers.com" }, { "ttl": 1800, "type": "MX", "value": "eforward1.registrar-servers.com", "priority": 10 }, { "ttl": 3601, "type": "SOA", "rname": "hostmaster.registrar-servers.com", "value": "dns1.registrar-servers.com" }, { "ttl": 1800, "type": "NS", "value": "dns1.registrar-servers.com" }, { "ttl": 1799, "type": "TXT", "value": "v=spf1 include:amazonses.com ~all" }, { "ttl": 1800, "type": "MX", "value": "eforward3.registrar-servers.com", "priority": 10 }, { "ttl": 1800, "type": "MX", "value": "eforward5.registrar-servers.com", "priority": 20 }, { "ttl": 1800, "type": "MX", "value": "eforward4.registrar-servers.com", "priority": 15 } ], "dns_at": "2026-10-26T00:34:34Z", "jarm": "2ad2ad16d2ad2ad00042d42d00000061256d32ed7779c14686ad100544dc8d", "cert": { "san": [ "lgmshop.fr" ], "issuer": "Let's Encrypt / YR1", "serial": "646fcbb28bdc89cf04f4cb012d324ca50c", "sha256": "4cc738caf70941b127c780683ff759c2084a7d6620983b2bb8266059deb61197", "subject": "lgmshop.fr", "valid_to": "2027-01-22T23:11:54Z", "valid_from": "2026-10-24T23:11:55Z" }, "whois": [], "rdap": { "status": [ "client transfer prohibited", "add period" ], "events": { "registration": "2025-11-03T15:58:40Z", "registrar expiration": "2026-11-03T15:58:40Z", "last update of RDAP database": "2026-10-24T23:43:00Z" }, "registrar": "NAMECHEAP INC", "registrar_iana_id": "1068" } }, "webcheck": { "v": 1, "fetched_at": "2026-11-02T04:54:28Z", "mail_config": { "mx": [ "eforward1.registrar-servers.com", "eforward2.registrar-servers.com", "eforward3.registrar-servers.com", "eforward4.registrar-servers.com", "eforward5.registrar-servers.com" ], "spf": "v=spf1 include:amazonses.com ~all", "dmarc": true, "spf_lookups": 1 }, "caa_records": { "domain": "prepontimeusa.com" }, "block_lists": { "resolvers": 12, "blocked_count": 0 }, "archives": { "last": "2025-07-10T01:41:47Z", "first": "2021-12-21T09:20:01Z", "changes": 7, "days_archived": 13, "scans_per_day": 0.01, "avg_page_bytes": 50544 }, "trackers": { "requests": 22, "trackers": [ { "name": "Google", "company": "Google", "country": "US", "category": "Advertising", "requests": 1 }, { "name": "YouTube", "company": "Google", "country": "US", "category": "Audio/Video Player", "requests": 9 }, { "name": "Google Fonts", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Photos", "company": "Google", "country": "US", "category": "Hosting", "requests": 1 }, { "name": "Google Static", "company": "Google", "country": "US", "category": "Hosting", "requests": 5 } ] }, "tls_connection": { "alpn": "http/1.1", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": false, "forward_secrecy": true }, "ports": { "open": [ 80, 443, 3000, 3389 ] }, "dns_server": { "ns": [ { "ip": "156.154.133.200", "host": "dns2.registrar-servers.com" }, { "ip": "156.154.132.200", "host": "dns1.registrar-servers.com" } ], "zone": "prepontimeusa.com" }, "location": { "ip": "179.61.227.233", "asn": "399486", "org": "12651980 Canada Inc.", "city": "Hyderabad", "country": "IN" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "lgmshop.fr" }, "dns": { "A": [ "179.61.227.233" ], "MX": [ "{\"exchange\": \"eforward5.registrar-servers.com\", \"priority\": 20}", "{\"exchange\": \"eforward3.registrar-servers.com\", \"priority\": 10}", "{\"exchange\": \"eforward4.registrar-servers.com\", \"priority\": 15}", "{\"exchange\": \"eforward2.registrar-servers.com\", \"priority\": 10}", "{\"exchange\": \"eforward1.registrar-servers.com\", \"priority\": 10}" ], "NS": [ "dns1.registrar-servers.com", "dns2.registrar-servers.com" ], "SOA": "{\"nsname\": \"dns1.registrar-servers.com\", \"hostmaster\": \"hostmaster.registrar-servers.com\", \"serial\": 1776477258, \"refresh\": 43200, \"retry\": 3600, \"expire\": 604800, \"minttl\": 3601}", "TXT": [ "v=spf1 include:amazonses.com ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "get_ip": { "ip": "179.61.227.233", "family": 4 }, "whois": { "registrar": "NameCheap, Inc.", "created": "2025-11-03T15:58:40Z", "updated": "2025-11-03T15:58:44Z", "expires": "2026-11-03T15:58:40Z", "status": [ "clientTransferProhibited https://icann.org/epp" ], "nameservers": [ "dns1.registrar-servers.com", "dns2.registrar-servers.com" ] } } } ```