easyridepk[.]com

The domain easyridepk.com was registered on 11 March 2026 through Spaceship, Inc. and is currently pointing to the IPv4 address 66.45.23.50, which belongs to OrangeHost (AS19853) in the United States. The authoritative name servers are ns1.orangehost.com and ns2.orangehost.com. The site serves a valid TLS certificate from Let’s Encrypt (R12) and returns HTTP status 200 for the landing page, whose title advertises “EasyRidePk | #1 Car Rental Islamabad, Rawalpindi & Lahore”. Although the visible content relates to vehicle rental, the site is classified as a tech‑support scam that impersonates Google, indicating a brand‑impersonation strategy.

Network analysis shows the server supports HTTP/3 and the front‑end is built with Tailwind CSS, suggesting recent development tooling. The domain’s MX record is configured to deliver mail to itself (priority 0, host easyridepk.com), a pattern often observed in phishing infrastructure to retain control of inbound communication. No additional sub‑domains were identified in the public DNS data.

Security telemetry flags the domain as high‑risk. PhishDestroy has already added it to its blocklist, and the domain appears on one external blocklist. VirusTotal scans report one of ninety‑five antivirus engines flagging the site, while Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious assessment. The limited detection count may reflect the short lifespan of the site, given its creation only a few months ago.

Defenders should treat any email or web traffic that references easyridepk.com as malicious, especially communications purporting to originate from Google. Blocking the domain at the DNS or proxy layer will prevent inadvertent user access. Incident response teams should monitor for similar brand‑impersonation patterns hosted on OrangeHost infrastructure and consider sharing indicators of compromise with threat‑intel communities to accelerate collective mitigation.