me[.]earnsprimesvest[.]com

Analysis indicates that the domain me.earnsprimesvest.com was registered on August 22, 2024 through the Hostinger Operations UAB registrar. The domain resolves to the IPv4 address 157.173.209.166, which is hosted on infrastructure that uses the generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com. The domain is currently listed as active and is associated with a generic phishing threat type. It appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, suggesting that at least one anti‑phishing service has observed malicious activity linked to the domain.

VirusTotal records show that the domain has been scanned by 91 vendor engines, none of which have raised a detection as of the report date. No public SSL certificate information, HTTP response codes, or page title data have been disclosed, limiting the ability to assess the surface‑web content directly. The absence of additional blocklist entries or reputation scores does not imply benign intent; the limited visibility may reflect a short operational window or targeted deployment.

Defenders should continue to monitor the domain, enforce outbound filtering for URLs matching the domain, and consider adding the domain to internal deny lists. Network traffic to the associated IP should be inspected for anomalous patterns, and any authentication attempts that involve the domain should be treated as potentially fraudulent. Ongoing intelligence collection, including periodic re‑scans on VirusTotal and retrieval of any newly published phishing kits or victim reports, is recommended to refine the risk posture.