VirusTotal
2 / 95
BildirInterpretation & limits
Engine detections from this stored analysis. Vendors and collection times may differ from other sources.
Assessment based on the stored source evidence below. Review sources →
easyprimemarket.online — İçerik kullanılamıyor. Marka kimliğine bürünme: Discord; Dolandırıcılık türü: Impersonation. Kanıt özeti: VirusTotal 2/95 (Fortinet, Gridinsoft); PhishDestroy score 56/100. Kayıt kuruluşu: Dynadot.
Özgün adli kaydı korumak için aşağıdaki ayrıntılı PhishDestroy AI analizi İngilizce bırakılmıştır.
These are dated observations, not a live safety check. No flag, a stored capture, or a completed analysis does not establish that a site is safe.
2 / 95
BildirEngine detections from this stored analysis. Vendors and collection times may differ from other sources.
no community references
BildirCommunity publication references, not a vendor verdict or evidence of a common operator.
provider verdict: clean
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
saklanan rapor
Bildir A preserved page image documents what the collector received; a capture is not a safety verdict.
83/100
A result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
Checked; no threat flag recorded
BildirA result applies to the recorded source and observation time. Absence of a flag is not proof of safety.
Stored narrative · generated . Provider checks below retain their own observation dates.
The domain easyprimemarket.online is a phishing site engaged in brand impersonation targeting Discord users. It presents itself as an official Discord-related service to deceive victims into entering login credentials or other sensitive information. No crypto drainer kit was identified. As of the latest verification, easyprimemarket.online has been taken offline.
Technical indicators confirm the domain's malicious intent. easyprimemarket.online was flagged by 2 of 95 VirusTotal security vendors, including Fortinet and Gridinsoft. It appears on 1 security blocklist, specifically PhishDestroy. The domain was registered through Dynadot LLC on May 19, 2025, and resolves to the IP address 192.3.141.251, hosted by AS36352 HostPapa in the US. No SSL certificate was issued, and the nameservers are ns1.anitahost.com and ns2.anitahost.com. The site returned an HTTP 530 status during analysis.
Victims of easyprimemarket.online should immediately change any passwords entered on the site, particularly for Discord accounts. Enable two-factor authentication (2FA) on all accounts to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized logins or messages sent without consent. Report the phishing domain to Discord's official support channels and submit it to platforms like Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG) to aid in broader takedown efforts.
Bu ana bilgisayar için saklanmış tarayıcı-karşı-tarayıcı gözlemleri ile Keitaro tarzı trafik dağıtım sistemleri için gerçek zamanlı parmak izi kontrolü.
Tarayıcı notu: unavailable: raw=connection_error; http=0; via=http_proxy; error=SOCKSHTTPConnectionPool(host='easyprimemarket.online', port=80): Max retries exceeded with url: / (Caused by NewConnecti
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
ns1.anitahost.comns2.anitahost.comLocation describes the IP network.
12 recorded events. These records describe collected evidence, outgoing notifications and publication; they do not confirm a complete investigation or a takedown.
We scan suspicious URLs, inspect public results and send evidence through the appropriate abuse-reporting channels. The dated events above show what is recorded for this domain. The directory below explains the wider workflow.
Capture the rendered page, requests and visible infrastructure.
Compare the available engine results and retain the analysis timestamp.
Check whether Google currently lists the URL as unsafe.
Inspect a public scan and its recorded network and classification data.
Look for indicator references and related community intelligence.
Compare archived captures and preserve historical context.
Look for matching indicators and associated threat records.
Inspect certificate records and related hostnames.
Compare security resolver responses and record observed blocking.
Inspect the public DNS, TLS, HTTP and technology surface.
Security services used for scanning, reputation checks and reporting are listed below. A service being listed is not evidence that it received, accepted or acted on this particular domain. Recorded submissions appear in the notification history above.
1 topluluk üyesi tarafından bildirildi; ilk görülme 08.08.2025
Hesap kimlik bilgilerini, kişisel bilgileri veya ödeme bilgilerini girdiyseniz ya da bu alan adından bir dosya indirdiyseniz hemen harekete geçin. Aşağıda olayı bildirmenize ve kendinizi korumanıza yardımcı olacak kaynaklar bulunmaktadır.
resmi siber suç iletişim bilgileri veya şikayet taslağı oluştur → almak için ülkenizi seçin.
Template-based draft · optional AI wording assistance requires separate consent
Saklanan engelleme listesi, WHOIS, DNS ve genel tarama kanıtlarını kullanarak tehdit analizi
Şimdi TaraŞüpheli alan adlarını tehdit veritabanımıza bildirin — topluluğu koruyun
BildirSon kimlik avı raporları ve gözlemlenen kullanılabilirlik değişiklikleri
İzleCanlı tehditleri izleyin veya bunun yanlış bir uyarı olduğunu düşünüyorsanız bu kayda itiraz edin