Public blocklists
2 external matches
DettagliInterpretation & limits
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
Domain security report
prismassets.fun
“PRISM Rewards · Prism”
Verdetto di minaccia
Assessment sources
Assessment based on the stored source evidence below. Review sources →
Disponibilità
Raggiungibile · accesso limitato
Risposta raggiungibile; il contenuto della pagina non è stato verificato
Osservato · HTTP probe
Segnali di rischio
Spamhaus DBL: DBL_SPAM
Corrispondenze della blocklist memorizzate: 2
Automated brand label: MetaMask
Dominio giovane: 2 giorni
Ultimo attivo conosciuto
- Registrar
- NiceNIC
- Resolved IP
- 104.21.73.224
- Registered
- 15/10/2026
Stored captures
2 sourcesThe capture source is temporarily unavailable.
In this reportGet help
ABUSE NOTICE · 24H+ OPEN
Outgoing abuse reports are recorded; the latest stored availability evidence still shows the domain reachable.
Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@radix.email.
The latest stored availability evidence still shows the domain reachable; 26 hours has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
Elapsed since first report
26 hours
Reports sent
1
Latest case ID
PD-20261016-857530
Current status
HTTP 403 at latest stored check
Riepilogo del rapporto
prismassets.fun — Raggiungibile · accesso limitato (HTTP 403). Simulazione del marchio: MetaMask; Tipo di truffa: Crypto Drainer. Riepilogo delle prove: VirusTotal 0/92; Spamhaus DBL_SPAM; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrar: NiceNIC.
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
Additional indicators at a glance
Spamhaus DBL
DBL_SPAM
OTX references
URLScan
Certificato TLS
Within stored validity dates
Let's Encrypt / YE1 · Hostname coverage not recordedEtà
2d Brand New!
Stato osservato
Raggiungibile · accesso limitato 403
Elenco da eliminare
Presente
Reports Sent
1
Source evidence
9 · sourcesThese are dated observations, not a live safety check. No flag, a stored capture, or a completed analysis does not establish that a site is safe.
Spamhaus DBL
DBL_SPAM
Interpretation & limits
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
VirusTotal
checked — no detections recorded
SegnalaInterpretation & limits
Engine detections from this stored analysis. Vendors and collection times may differ from other sources.
URLQuery
Report stored; detailed verdict not recorded
Observation time not recorded
Segnala Interpretation & limits
Alerts refer to the preserved scan. They do not describe the current state of the site.
OTX
4 community references
SegnalaInterpretation & limits
Community publication references, not a vendor verdict or evidence of a common operator.
CF Radar
provider verdict: suspicious
Observation time not recorded
Segnala Interpretation & limits
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
URLScan capture
rapporto memorizzato
View stored capture ↗ SegnalaInterpretation & limits
A preserved page image documents what the collector received; a capture is not a safety verdict.
URLScan verdict
Analisi completata
SegnalaInterpretation & limits
This is the recorded automated analysis. Completion alone is not a safety verdict.
Google Safe Browsing
Checked; no threat flag recorded
SegnalaInterpretation & limits
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
Informazioni sulla sicurezza di rete Registrar context
Registrar context
NiceNIC
Stored registration data identifies NICENIC INTERNATIONAL GROUP CO., LIMITED (IANA 3765) as the registrar. PhishDestroy maintains separate NiceNIC abuse-report research; registrar association is contextual and is not an independent detection for this domain.
Riepilogo delle prove
AI-assisted analysis Stored narrative · generated . Provider checks below retain their own observation dates. This narrative is an interpretation of collected evidence, not an independent source verdict.
Assessment
prismassets.fun was observed with multiple security-related records on 2026-10-16, including a listing on the PhishDestroy internal database. The domain also appeared on two external blocklists as of that date.
Recorded Evidence
PhishDestroy internally listed prismassets.fun on 2026-10-16. On the same day, MetaMask and SEAL included the domain on their external blocklists. VirusTotal checked the domain on 2026-10-16, recording 0 detections out of 92 total scanners. OTX documented four pulses referencing the domain on 2026-10-16. The registrar was NICENIC INTERNATIONAL GROUP CO., LIMITED, and the SSL certificate was issued by Let's Encrypt / YE1.
Interpretation
PhishDestroy provides an internal listing for prismassets.fun, which records its presence in their database as of the stated date. VirusTotal's measurement captures the number of security vendors that flagged the domain during its scan, while OTX pulses reflect community-sourced security intelligence. These sources document a range of security-related observations for the domain within a narrow timeframe.
Recommended Actions
For prismassets.fun, retain the PhishDestroy internal listing and external blocklist records for ongoing reference. Compare future VirusTotal and OTX results with the current evidence to track any changes in security observations. Review these records when evaluating the domain in security workflows.
Data coverage & collection
25 · datasets with records / 6 · not recorded
What this report contains, where it came from, and when it was collected. A retained record can be incomplete; collection status is separate from the threat assessment.
Recorded dataPartial recordUTC
- VirusTotal
- 0 / 92 · engine detections
- URLScan analysis
- Automated verdict retained
- URLQuery
- Stored source recordCollection time not recorded
- Google Safe Browsing
- Checked; no threat flag recorded
- OTX publications
- 4 · community references
- External blocklists
- 2 · external matches
- Cloudflare Radar
- suspiciousCollection time not recorded
- Spamhaus DBL
- DBL_SPAM
- Domain registration
- NICENIC INTERNATIONAL GROUP CO., LIMITEDCollection time not recorded
- Network & DNS
- 104.21.73.224 · 2 · nameserversCollection time not recorded
- Certificato TLS
- Let's Encrypt / YE1
- Page captures
- 2 · retained captures
- HTML archives
- 1 · retained responses
- Page analysis
- 0 · automated brand labels
- Observed indicators
- 1 · wallet / Telegram indicators
- Detection & evasion
- Stored browser and crawler comparison
- Site configuration files
- robots.txt · sitemap.xml · security.txt
- PageSpeed performance
- 72/100 · mobile performance
- Response records
- 1 · outgoing report records
- Availability history
- 4 · stored state changes
- Source observation history
- 2 · stored source events
- Lookalike relationships
- 79 · retained relationshipsCollection time not recorded
- Chainabuse records
- 1 · recorded reports
- IP reputation
- Network-level observations
- Wayback archive
- Archive link retained
Not recorded in this report 6
These checks have no retained result. This does not mean they passed or that a scan is running.
- PhishStats
- DNS security filters
- Gridinsoft
- Scamadviser
- Recorded subdomains
- Segnalazioni della comunità
Download the dated observations and supporting metadata.
Extracted from stored page analysis
1 wallet · 0 Telegram
Observed indicators
Full extracted values, their blockchain and collection source. An address found in page content does not establish who controls it.
0x20024e485c0b22b42855589700721b28320a7777Format validated · Domain analysisIoC extraction recorded 2026-10-17 04:00:25 UTC
Blocklist records
2 · external source matches
Stato della lista di blocco pubblica
Domain, network & archive
NICENIC INTERNATIONAL GROUP CO., LIMITED · 104.21.73.224 · DNS, TLS and retained responses
Domain details
Dominio
URLScan verdict
Analisi completata
score 0 report ↗
Observed indicators1 wallet · 0 Telegram — full values ↗
IP Context
Cloudflare shared edge
origin IP hidden
La reputazione Edge-IP non è attribuita a questo dominio.
OTX tags
Registrar
NiceNIC
(RU)
PhishDestroy Investigation
(RU)
PhishDestroy Investigation
RegistrazioneCreato 15/10/2026 (2d · Brand New!) — Expires 15/10/2027
Stato HTTP403 Forbidden
Dettagli tecniciProvenance & timestamps
Rilevato per la prima volta16/10/2026
DOM Analysis
IoC Extraction
Submitted URLhttp://prismassets.fun/
Favicon Hash
ID del caso
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
L’accreditamento è un contratto, non un sigillo di sicurezza.
Verifica le tariffe ICANN
Leggi il RAA §3.18
PHISHDESTROY INVESTIGATIONICANN funding, contracts, and DNS abuse oversight
Network & certificates
Stored technical evidenceNetwork & DNS
Shared CDN edge- Resolved IP
- 104.21.73.224
- Network ASN
- AS13335
- Organization
- Cloudflare, Inc.
- Observed location
- San Francisco, US
- Server header
- cloudflare
La reputazione Edge-IP non è attribuita a questo dominio.
Nameserver 2
melody.ns.cloudflare.comvicky.ns.cloudflare.com
Location describes the IP network.
Certificato TLS
- Issuer
- Let's Encrypt / YE1
- Valid from
- 2026-10-15 02:47:54
- Valid until
- 2027-01-13 02:47:53
- Hostname coverage
- Hostname coverage not recorded
- Validity
- Within stored validity dates
- Collection time
- 2026-10-16 16:02:07 UTC
- Collection source
- PhishDestroy collector
Certificate fingerprint
3ec97d9f678aa4b9eb32372935e7dc6377940a9138892666bdfbd34b13d7b65cSaved certificate metadata. Certificate dates without a timezone are shown as stored. Transport encryption does not establish that the site is trustworthy.
Latest Classified Outcome 2026-10-17 10:57:34 UTC
Primary outcome
Provider block observed
reason: Cloudflare anti-phishing block 95% confidence
Attribution
Cloudflare mechanism: Phishing Interstitial source: Current Http Probe
Evidence layers
Availability: Provider blocked
Content: Provider blocked
DNS: Resolved
Registration: Active
Latest HTTP observation
Provider block observed Cloudflare anti-phishing block Cloudflare Phishing Interstitial 95% provider marker verified 2026-10-17 10:57:34 UTC
RDAP registration
Attivo NICENIC INTERNATIONAL GROUP CO., LIMITED · IANA 3765 RDAP HTTP 200 source: Rdap Status Collector AddperiodclientDeleteProhibitedclientTransferProhibited expires 2027-10-15 01:22:43 UTC checked 2026-10-17 04:42:10 UTC
Observed timeline
last reachable: 2026-10-17 02:41:11 UTC last content: 2026-10-17 02:41:11 UTC current episode first observed: 2026-10-17 10:57:34 UTC observed RIP window: 2026-10-17 02:41:11 UTC → 2026-10-17 10:57:34 UTC · 8.27h midpoint estimate ≈ 2026-10-17 06:49:22 UTC · precision medium · basis bounded
Availability, content, DNS and registration are independent evidence layers. NXDOMAIN, an unreachable origin or missing content alone does not prove registrar action. A registrar or provider is credited only when a direct technical marker identifies that actor. Report causality is shown separately.
Tecnologie · 3 identified
Cloudflare Browser Insights
Analytics
RUM
Cloudflare
CDN
HTTP/3
Miscellaneous
Detected via Cloudflare Radar · Wappalyzer engine
Segnala questo dominio
Invia le prove e contribuisci a proteggere gli altri
Prove archiviate
Wayback Machine Snapshot
È disponibile un'istantanea storica per la revisione delle prove
Analisi delle prestazioni del sito
Google PageSpeed Insights — mobile performance audit of prismassets.fun · checked Oct 16, 2026
72
Needs Work
Performance
FCP
1.54s
First Contentful Paint
LCP
3.48s
Largest Contentful Paint
CLS
0
Cumulative Layout Shift
TBT
366ms
Total Blocking Time
SI
16.36s
Speed Index
Powered by Google PageSpeed Insights · Mobile strategy · Scores: 90-100 Good 50-89 Needs Work 0-49 Poor
Stored Capture Evidence 1 snapshot
Timestamped response metadata retained by the local collection pipeline. Each value below belongs to the displayed archive time.
Archived HTTP response
HTTP 200
Requested URL:
http://prismassets.fun/Final URL:
https://prismassets.fun/PRISM Rewards · Prism
Risposta
HTTP 200
HTTP 200
HTML body
10.6 KB
10.6 KB
Compressed
3.4 KB
3.4 KB
Links
0 internal · 0 external
0 internal · 0 external
Detected technologies
cloudflare
Selected response headers
Content-Type: text/htmlServer: cloudflareCF-Cache-Status: DYNAMICContent-Encoding: gzip
HSTS: not observed
DNSSEC: not observed
WAF / firewall: observed
Cloaking flag: not observed
Saved response-header values · 14
- alt-svc
h3=":443"; ma=86400- cf-cache-status
DYNAMIC- CF-RAY
a4b7c9929af46e26-EWR- Connection
keep-alive- Content-Encoding
gzip- Content-Type
text/html- Date
Fri, 16 Oct 2026 14:34:58 GMT- Last-Modified
Fri, 16 Oct 2026 07:37:23 GMT- Nel
{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}- Report-To
{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=C%2FjffR4QH%2BzjZiSTzLTuNf4wcRH7rEHzpzx3j0l7R7bXDN2q9ULNowf11nvgw8h96u95TNRjHZIzg7F3bNFvur7wh99zmF9eRa01hq4e4T6iHDUbGzPrCsYt5dL5GNRac1A%3D"}]}- Server
cloudflare- Server-Timing
cfCacheStatus;desc="DYNAMIC"- Transfer-Encoding
chunked- Vary
Accept-Encoding
Values retained by the collector; long values may be shortened during collection.
Crawler & disclosure files
3 · file checks
Site configuration evidence
Stored file checks, including unavailable and invalid responses. Retained contents and paths appear where available.
robots.txt
Unverified (legacy)/robots.txt
A legacy response is stored, but it does not establish whether the file exists.
Sitemap
Unverified (legacy)/sitemap.xml
A legacy response is stored, but it does not establish whether the file exists.
security.txt
Unverified (legacy)/.well-known/security.txt
A legacy response is stored, but it does not establish whether the file exists.
Registration & observation details16
Registration evidence
- RDAP statuses
- addperiod · clientdeleteprohibited · clienttransferprohibited
- RDAP response
- 200
- Registrar in registration evidence
- NICENIC INTERNATIONAL GROUP CO., LIMITED
- Registrar IANA ID
- 3765
- Expiration recorded by RDAP
- Registration observation
- Registration source
- rdap_status_collector
Availability observations
- Last reachable observation
- Last content observation
- Outcome first observed
- Observation window starts
- Observation window ends
- Estimated change time
- Observation window · hours
- 8.27
- Estimate basis
- Bounded by observations
- Estimate precision
- Medio
An estimated time describes an observation window. It does not prove a registrar action or the exact moment a site became unavailable.
Detection & evasion checks
Stored browser and crawler observations
Analisi di rilevamento ed evasione
Sospetto cloaking: i titoli dello scanner e quelli dei visitatori non corrispondono
Non ancora scansionato
Non è stata ancora rilevata alcuna differenza tra crawler e browser
Osservazioni archiviate relative al confronto tra crawler e browser per questo host, oltre a una verifica in tempo reale delle impronte digitali per i sistemi di distribuzione del traffico in stile Keitaro.
- Flag di occultamento memorizzato
- Non ancora scansionato
- Ultima scansione di occultamento
- Intestazione del server rilevata dallo scanner
cloudflare- Indirizzamento delle acquisizioni
Localarchiviato l'2026-10-16 14:34:59, UTC
Nota dello scanner: cloudflare_ban: raw=cf_phishing_block; http=403; via=https_direct; server=cloudflare; provider_error=cloudflare_phishing_interstitial
Risposta del provider durante la scansione: cloudflare_phishing_interstitial
Titolo visualizzato sullo scanner di sicurezzaSuspected Phishing | Cloudflare
Titolo visualizzato agli utenti che visitano il sito tramite browserPRISM Rewards · Prism
Verifica delle impronte digitali in tempo reale TDS
Sette indicatori Keitaro e un confronto tra browser e crawler. Una nuova scansione parte solo premendo il pulsante.
Su richiesta
Nessun risultato di verifica live salvato.
Timeline & response
1 · outbound report records
Forensic History & Detection Timeline
ThreatLifecycleTelemetry
This timeline displays historical security and status checkpoints observed by the PhishDestroy automated monitoring network. It records domain lifecycle updates, scanner changes, and threat telemetry over time.
-
Domain Status Transition 2026-10-17 10:57:34 UTCSource: PhishDestroy monitoring
Event details
Domain state transitioned from alive to dead. -
Threat First Observed 2026-10-16 14:33:16 UTCSource: PhishDestroy monitoring
Event details
Domain ingestion complete. Initial state is marked as alive pointing to IP104.21.73.224.
Stored observation history6
Dated changes retained by the monitor and source collectors. Newest observations appear first; source states are not proof of a takedown.
-
Availability monitor · Recorded state
Sconosciuto→blocked
cloudflare_antiphishing · Cloudflare · phishing_interstitial
-
Availability monitor · Recorded state
Raggiungibile→Non disponibile
-
Availability monitor · Recorded state
live_content→Sconosciuto
probe_inconclusive
-
Availability monitor · Recorded state
Sconosciuto→live_content
content_served
-
Availability monitor · Recorded state
Sconosciuto
probe_inconclusive
Earlier observations 1
-
Availability monitor · First collection record
Raggiungibile
Pipeline di risposta alle minacce
Scoperta
Analysis
Notifications
Monitoring
14 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
Minaccia rilevata
prismassets.fun rilevati e inseriti in coda per un’analisi completa
Spamhaus DBL
Spamhaus DBL recorded DBL_SPAM
URLScan.io Capture
Memorizzato URLScan report with capture artifacts
Cloudflare Radar Report
A stored Cloudflare Radar report is available. The report link alone is not a malicious verdict and does not prove that every network field was captured.
Web Archive
Preserved in Wayback Machine — historical evidence archived
Rilevamento delle liste di blocco
Si trova in 2 blocklists: MetaMask, SEAL
OTX Community References
4 community publication references on AlienVault OTX. References are not vendor verdicts and are excluded from the evidence score.
Registrar Context: NiceNIC
Separate registrar research is available. Registrar association is contextual and is not scored as an independent detection.
Brand Impersonation
Impersonation of MetaMask
Forensic Evidence Collected
Stored evidence from URLScan.io, URLQuery, stored screenshot
Technical Analysis Recorded
Il report contiene tecnologia archiviata o risultati di analisi forensi.
Content Observed Unavailable
Il monitoraggio ha registrato una risposta non disponibile (HTTP 403); la causa non è stata stabilita in modo indipendente.
Sent Report Recorded
Stored outgoing record associated with registrar NICENIC INTERNATIONAL GROUP CO., LIMITED, 1 abuse contact
abuse@nicenic.net
DestroyList pubblicato
Listed in the public PhishDestroy/DestroyList repository
Monitoring Continues
Il dominio rimane raggiungibile o ad accesso limitato; controlli futuri potrebbero aggiornare questa osservazione.
How we investigate & report
Public scans, evidence and abuse channels
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
01Public scans & evidence collection10 sources and tool groups
urlscan.io
Screenshot · DOM · HTTP
Capture the rendered page, requests and visible infrastructure.
VirusTotal
Multi-engine verdicts
Compare the available engine results and retain the analysis timestamp.
Google Safe Browsing
Transparency Report
Check whether Google currently lists the URL as unsafe.
Cloudflare Radar
DNS · certificates · categories
Inspect a public scan and its recorded network and classification data.
AlienVault OTX
Threat-intelligence pulses
Look for indicator references and related community intelligence.
Wayback Machine
Historical evidence
Compare archived captures and preserve historical context.
abuse.ch ThreatFox
IOC correlation
Look for matching indicators and associated threat records.
crt.sh
Certificate Transparency
Inspect certificate records and related hostnames.
DNS Security Filters
Quad9 · AdGuard · CleanBrowsing
Compare security resolver responses and record observed blocking.
Web-Check
Surface inspection
Inspect the public DNS, TLS, HTTP and technology surface.
02Abuse reports & follow-upRegistrar, hosting and security channels
- Identify the responsible provider. Match registration and hosting records to the relevant abuse contact.
- Prepare an evidence package. Include the URL, public scan references, captures and the recorded observations.
- Send the report. Keep outgoing report records and recipient information when available.
- Recheck and publish updates. Track later scanner verdicts, provider responses and site availability.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
GoogleSafe Browsing↗
GoogleWeb Risk↗
MicrosoftSmartScreen↗
VirusTotalURL analysis↗
CloudflareRadar / abuse reporting↗
YandexSafe Browsing↗
URLScan.ioPublic scan↗
ESETSample / URL submission↗
BitdefenderURL submission↗
NortonSafe Web↗
SymantecRecensione del sito↗
AviraURL reporting↗
Avast / AVGURL reporting↗
KasperskyOpenTIP↗
Dr.WebOnline scanner↗
NetcraftAbuse reporting↗
PhishTankCommunity reporting↗
APWG eCXPhishing intelligence↗
PhishStatsPublic feed↗
Phish.ReportHosting abuse↗
SpamhausDomain reputation↗
PolySwarmMulti-engine analysis↗
CheckPhishURL scan↗
QutteraMalware scan↗
URLqueryBrowser analysis↗
Criminal IPAsset intelligence↗
CRDFThreat Center↗
ScamadviserReputation check↗
MyWOTCommunity reputation↗
Related infrastructure
Shared hosting, registrar records and related domains
Domini simili
79 domini simili memorizzati
etamask.io
omission Report interno
meetamask.io
repetition Report interno
megamask.io
replacement Report interno
metam.ask.io
subdomain Report interno
metamaak.io
replacement Report interno
metamadk.io
replacement Report interno
metamaks.io
transposition Report interno
metamassk.io
insertion Report interno
metamsask.io
insertion Report interno
metamssk.io
replacement Report interno
metanask.io
homoglyph Report interno
metanmask.io
homoglyph Report interno
Mostra tutto (67)
metasmask.io
insertion Report interno
metramask.io
insertion Report interno
mewtamask.io
insertion Report interno
mmetamask.io
homoglyph Report interno
mtamask.io
omission Report interno
mwetamask.io
insertion Report interno
nmetamask.io
homoglyph Report interno
metamark.io
bitsquatting Report interno
metamaskj.io
addition Report interno
metammask.io
homoglyph Report interno
metamnask.io
homoglyph Report interno
emtamask.io
transposition
m-etamask.io
hyphenation
meamask.io
omission
meatmask.io
transposition
meramask.io
replacement
mertamask.io
insertion
metaamask.io
repetition
metaamsk.io
transposition
metaask.io
omission
metalmask.io
insertion
metamaask.io
insertion
metamadsk.io
insertion
metamaek.io
replacement
metamak.io
omission
metamas.io
omission
metamasak.io
insertion
metamasdk.io
insertion
metamask-io.com
various
metamasl.io
replacement
metamasm.io
replacement
metamsak.io
transposition
metamsk.io
omission
metamusk.io
vowel-swap
metamzsk.io
replacement
metarnask.io
homoglyph
metmaask.io
transposition
metmask.io
omission
metsamask.io
insertion
metsmask.io
replacement
mettamask.io
repetition
metwmask.io
replacement
metyamask.io
insertion
metzmask.io
replacement
meyamask.io
replacement
meytamask.io
insertion
mitamask.io
vowel-swap
mnetamask.io
homoglyph
mretamask.io
insertion
mrtamask.io
replacement
mstamask.io
replacement
mteamask.io
transposition
mwtamask.io
replacement
rnetamask.io
homoglyph
matamask.io
bitsquatting
mdtamask.io
bitsquatting
metamasi.io
bitsquatting
metamasj.io
bitsquatting
metamaska.io
addition
metamaskk.io
addition
metamaskl.io
addition
metamaso.io
bitsquatting
metamesk.io
bitsquatting
metamqsk.io
bitsquatting
metemask.io
bitsquatting
netamask.io
homoglyph
xn--metamas-bhb.io
homoglyph
Infrastruttura e rapporti correlati
- Link diretto Condivide una registrazione o un kit di phishing identico.
- Segnale di supporto Condivide l'infrastruttura o un marchio di riferimento; non costituisce prova della presenza di un unico operatore.
- Solo per la scoperta Elencato ai fini della navigazione; nessun attributo in comune con questo host.
Ogni riga rappresenta un motivo per cui un dominio è collegato a questo host. I nodi a dimensione intera indicano rilevamenti di VirusTotal, mentre quelli tratteggiati sono già offline. Di seguito è riportato l'elenco completo.
Risultati corrispondenti 4
Stesso hash della favicon o stesso titolo della pagina di questo host.
MetaMask usurpazione d'identità 8
Questi domini prendono di mira anche gli utenti di MetaMask. Visualizza tutte le minacce relative a "MetaMask" →
Stesso registrar: NiceNIC 6
Registrati tramite lo stesso registrar. Un registrar serve milioni di clienti non collegati tra loro, quindi questo dato indica semplicemente un raggruppamento piuttosto che dimostrare un nesso.
Rapporti recenti sulle minacce 4
Rapporti aggiunti di recente dal database PhishDestroy. Questi collegamenti di scoperta non implicano infrastrutture o proprietà condivise.
Community records
Retained community reports and observations
Intelligence della comunità
1 segnalazione della comunità
CategoriaIMPERSONATION
Phishing campaign impersonating Prism402 / $PRISM on X. Since 16 Oct 2026, accounts are mass-replying under posts from @prism402 (the official account of Prism402, prism402.com) with quotes of an X Article titled "REWARDS PROPOSAL". It claims holders can "vote on the upcoming
Evidence & investigation tools
Original reports, independent checks and evidence links
Dati e relazioni esterne
Analisi della sicurezza
Community Scam Report — ChainAbuse
1 report filed for prismassets.fun (1 written by a person) · category: Impersonation · source checked
“Phishing campaign impersonating Prism402 / $PRISM on X. Since 16 Oct 2026, accounts are mass-replying under posts from @prism402 (the official account of Prism402, prism402.com) with quotes of an X Article titled "REWARDS PROPOSAL". It claims holders can "vote on the upcoming PRISM rewards date directly from their own wallet" and that votes in the "first 48 hours qualify for an early $PRISM allocation", linking to https://prismassets.fun/. Prism402 runs no vote, airdrop, allocation or clai”
— reported by Anonymous on Oct 16, 2026 · Source: ChainAbuse (TRM Labs) — full report and evidence there.
Istantanea delle prove inviate
Sent: Ledger records: 1
Case ID:
PD-20261016-857530 Recipient: abuse@radix.email
PDF notice generated Notice text archived (416 chars)
Abuse notice text as sent to the provider
Registrar: NICENIC International Group Co., Limited (Hong Kong (China)) Policy Violations: “Services may be used only for lawful purposes… fraud, abuse and illegal activity prohibited. Violations may result in immediate suspension.” + dedicated abuse handling and takedown Applicable Laws: Crimes Ordinance Cap.200 (Fraud), Theft Ordinance Cap.210 §16A (fraud by deception), Personal Data (Privacy) Ordinance Cap.486
OSINT e intelligence
DNS e rete
SEO e dominio
Analisi approfondita
Help & reporting
Recovery steps, reporting contacts and complaint drafts
Help & reporting
Questo sito ti ha influenzato in qualche modo?
5 evidence signal groups linked
1 stored notification records
Raggiungibile · accesso limitato
If credentials were compromised, report immediately. Do not engage with recovery scammers.
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Official reporting routes
Europol
Find your country
Trova il canale di segnalazione ufficiale per il tuo paese dell'UE
National police directory
Action Fraud
Report online
Segnala frodi e crimini informatici in Inghilterra, Galles e Irlanda del Nord
Contact centre0300 123 2040
PhishDestroy listing review Non un rapporto delle forze dell'ordine
Ricorso in materia di domini
Richiedi una revisione se possiedi questo dominio e ritieni che l'elenco non sia corretto
Attenzione ai truffatori che promettono il recupero dei fondi! I criminali possono contattare nuovamente le vittime fingendo di essere investigatori, avvocati o agenti di recupero. Non pagare commissioni anticipate né condividere credenziali. Scopri di più sulle frodi relative ai sussidi di recupero →
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Elenco di 97 paesi
Template-based draft · optional AI wording assistance requires separate consent
Bozza assistita dall'intelligenza artificiale: i dettagli dell'incidente vengono elaborati dal fornitore di intelligenza artificiale · Controllalo e invialo tu stesso
Raccomandazioni e consigli per le vittime
Choose the steps that match what you shared. Keep a copy of this report alongside your own records.
Cosa devo fare subito?
UrgenteStop using the suspicious site. Open the real service through its official app or an address you already trust.
- Modifica tutte le password — e-mail, account Exchange, qualsiasi servizio che utilizzi la stessa password
- Abilita l'autenticazione a due fattori (2FA) utilizzando un'app di autenticazione (non via SMS). Disattiva il recupero tramite SMS
- Carte congelate se hai inserito i tuoi dati bancari sul sito di phishing
Quali informazioni devo raccogliere per la mia relazione?
Linee guida dell'FBIKeep original emails, receipts, messages and screenshots in a secure place. A factual timeline helps the receiving authority understand what happened. IC3 evidence guidance ↗
- Payment records — if you paid, save the receipt, amount, date, payment provider and recipient details.
- Date e orari esatti — di ogni transazione e del primo contatto con il truffatore
- Schermate — siti web truffaldini, messaggi in chat, e-mail, transazioni tramite portafoglio digitale, social media
- Tutti gli URL e i domini utilizzato dal truffatore (tra cui
prismassets.fun) - Comunicazioni — e-mail, SMS, numeri di telefono, nomi utente utilizzati dal truffatore
Anche se non conosci tutti i dettagli — sporgere comunque denuncia. Anche le informazioni parziali sono comunque utili alle indagini.
A chi devo segnalare la truffa?
- FBI IC3 — Internet Crime Complaint Center (sistema di segnalazione federale degli Stati Uniti)
- Europol — Segnalazioni relative alla criminalità informatica in Europa (UE)
- Your bank or payment provider — contact its fraud team promptly through official contact details if money or card information was exposed.
- Polizia locale — crea un documento ufficiale, anche se non è in grado di agire immediatamente
A report is not a guarantee of recovery or investigation, but prompt, accurate transaction data can help authorities and service providers trace the incident.
How do phishing scams typically work?
- Siti web fasulli — cloni perfetti, al pixel, di siti legittimi con domini leggermente modificati
- Macellazione dei suini — fiducia conquistata nel corso di settimane tramite Telegram/WhatsApp/app di incontri, per poi rubare i soldi
- Truffe legate al recupero dei fondi — fraudsters pose as recovery agents and demand upfront fees. Never share a seed phrase or pay before independently verifying the provider
- Truffe basate sull'intelligenza artificiale — i deepfake, il phishing automatizzato e i siti generati dall’intelligenza artificiale rendono più difficile individuare le frodi
Come posso proteggermi in futuro?
- Aggiungi i siti ufficiali ai preferiti — Non cliccare mai sui link contenuti nelle e-mail, nei messaggi diretti o negli annunci pubblicitari
- Verifica i domini — controllare PhishDestroy prima di interagire. Verifica l'HTTPS, l'ortografia e l'età del dominio
- "Troppo bello per essere vero" = truffa — rendimenti garantiti, testimonial di personaggi famosi, scadenze urgenti
Further guidance: NIST · phishing responseFBI IC3 · reports & evidenceFTC · recovery scams
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo
Informazioni su questo rapporto: prismassets.fun
Questo rapporto presenta le ultime prove archiviate disponibili per PhishDestroy. I timestamp della sorgente vengono mostrati ove disponibili; la disponibilità e i verdetti del fornitore possono cambiare dopo il ritiro.
Il sito catturato mostrava il titolo della pagina “PRISM Rewards · Prism” e potrebbe spacciarsi per MetaMask.
PhishDestroy elenca prismassets.fun come sospetto. È stato controllato dai motori di sicurezza 92; i verdetti automatizzati possono cambiare. Il monitoraggio continua. Osservato: 2026-10-16 16:35:01 UTC
Each source records a particular observation. A screenshot, an available website, or a result with no detections does not establish that a site is safe. Source results can change after they are collected.
Se ritieni che questo elenco sia impreciso, presentare ricorso. Per conoscere la nostra metodologia, visita Pagina delle domande frequenti.