Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is domain@apiname.com.
The latest stored availability evidence still shows the domain reachable; 5 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
recovery[.]primeaccts[.]com
“RecoverPro - Home”
recovery.primeaccts.com — Non vérifié. Type d'arnaque : Wallet/seed Phishing. Résumé des preuves: VirusTotal 2/91 (alphaMountain.ai, Gridinsoft); PhishDestroy score 71/100. Bureau d’enregistrement: Atak Domain Bilgi Tekn….
L’analyse détaillée de PhishDestroy AI reste en anglais afin de préserver le relevé forensique original.
This domain, recovery.primeaccts.com, is flagged as an active high-risk phishing site targeting users through a fraudulent account recovery portal. Analysis indicates the page title is 'RecoverPro - Home,' suggesting an attempt to impersonate a legitimate account recovery service. The domain was registered on March 7, 2026, through Atak Domain Bilgi Teknolojileri A.S. and currently resolves to IP address 192.64.118.78. It is blocked by at least two security vendors, including PhishDestroy and BLP-Malware, and appears on two security blocklists. Infrastructure analysis reveals the use of PHP, Tailwind CSS, and LiteSpeed technologies, with an SSL certificate issued by Sectigo Limited. While the domain has been flagged by two of 95 security vendors on VirusTotal, the specific nature of the phishing content remains unconfirmed beyond the page title. No brand impersonation details are explicitly identified in the available data, though the 'RecoverPro' label implies a focus on account recovery scams. Defenders should treat this domain as malicious, block it at the network level, and monitor for related indicators of compromise. The site remains active as of July 12, 2026, and further analysis of its content is recommended to determine the exact tactics employed.
Processus de réponse aux menaces Pipeline
Statut de la liste de blocage publique
Capture enregistrée
Informations sur les domaines
Détails techniquesDNS, SAN SSL, horodatages
ICANN OVERSIGHT
Registration: primeaccts.com
Contexte de l’accréditation et du RAA
Contexte de l’accréditation et du RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain primeaccts.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Technologies · 4 identified
Server-side scripting language designed for web development.
Utility-first CSS framework for rapid custom UI development.
High-performance web server compatible with Apache configurations.
Analyse VirusTotal
Preuves archivées
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of recovery.primeaccts.com · checked Jul 13, 2026
Données factuelles et rapports externes
PD-20260306-4E10E8 Recipient: domain@apiname.com Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif