Is desim.online safe?
http://desim.online/
Checked on
How we checked
Coverage: strong · 3 of 4 applicable core capabilities
- Antivirus (67 of 96 engines answered) · saved result: did not fully complete
- Google Safe Browsing: completed
- page reading: completed
- page capture: completed
- domain records: completed
- web research: completed
Nine-day-old eSIM shop takes orders only through Instagram and email, with no company identity or checkout
Desim is a brand-new storefront selling a '12-month unlimited data eSIM' for a one-time upfront payment, but it has no visible company name, address, or direct contact email, and it does not run a normal checkout. Instead, visitors are told to 'Message us on Instagram or email' so the seller can 'confirm your device and price, then send your QR code'. The domain is only 9 days old, and the only support channel offered is Instagram plus an unspecified email. The site has a valid encrypted connection and no current threat warnings, so there is no sign of malware or phishing, but the combination of an unverifiable operator, a very new domain, and an off-platform payment path is a classic setup for a buyer to pay and receive nothing. That mix of clean technical checks with serious operator-level risk places it in the Moderate Risk band.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
Why 52/100
Moderate Risk covers scores 45–69. 4 findings pulled the score down; 1 pushed it up.
What pulled the score down
- ModerateOrders are completed by messaging the seller on Instagram or email, where the seller confirms the device and price and then sends a QR code, bypassing any standard checkout or dispute process.
- ModerateThe shop advertises a one-time upfront payment for 12 months of unlimited data, while its own comparison table notes that a fair-use policy applies to the unlimited allowance.
- ModerateThe site provides no company name, registration number, physical address, or direct contact email; only Instagram and an unspecified email are offered for support.
- MinorThe registrable domain is only 9 days old, so the shop has no operating history or independent reputation.
What pushed the score up
- SupportsThe saved TLS check found a valid encrypted connection and the browser threat feed returned no threat warning.
No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor). Community reviews never change the Safety Score.
01 · Investigation Brief
Investigation Brief
Desim is a brand-new storefront selling a '12-month unlimited data eSIM' for a one-time upfront payment, but it has no visible company name, address, or direct contact email, and it does not run a normal checkout. Instead, visitors are told to 'Message us on Instagram or email' so the seller can 'confirm your device and price, then send your QR code'. The domain is only 9 days old, and the only support channel offered is Instagram plus an unspecified email. The site has a valid encrypted connection and no current threat warnings, so there is no sign of malware or phishing, but the combination of an unverifiable operator, a very new domain, and an off-platform payment path is a classic setup for a buyer to pay and receive nothing. That mix of clean technical checks with serious operator-level risk places it in the Moderate Risk band.
No verifiable operator behind a nine-day-old domain
The registrable domain is only 9 days old, which means there is no track record, no history of fulfilled orders, and no time for independent reviews to accumulate. A brand-new domain is not proof of fraud on its own, but it removes the main way a buyer would normally check whether a shop is real.
The captured page contains no direct contact email, and the site provides no company name, registration number, or physical address. The only support channel advertised is '24/7 support on Instagram and email', which leaves the buyer with no verifiable legal entity to pursue if the order goes wrong.
Orders are pushed off the website into Instagram and email
The site's own instructions tell visitors to 'Message us on Instagram or email. We confirm your device and price, then send your QR code.' The 'Get details' call to action leads into this same off-platform conversation rather than a standard checkout.
The product itself is unusual: 'One eSIM. Unlimited data for a full year. No contracts, no roaming bills,' paid 'Once, upfront'. A one-time payment for twelve months of unlimited data is far outside how established eSIM providers operate, and the site's own comparison table admits that 'FUP applies' to the unlimited allowance. Combined with the off-platform ordering, a buyer has no card-network dispute path and no clear refund terms.
Clean technical checks do not make the shop trustworthy
The saved TLS check found a valid encrypted connection, and the browser threat feed returned no threat warning. Those results mean the site is not currently flagged for malware or phishing, and they are genuine positives.
However, a valid certificate and a clean blocklist only show that the page is not serving known malicious code. They say nothing about whether the operator will actually deliver the eSIM after receiving an upfront payment through an Instagram conversation. The risk here is commercial, not technical.
Why the score is 52
Orders are completed by messaging the seller on Instagram or email, where the seller confirms the device and price and then sends a QR code, bypassing any standard checkout or dispute process. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
0/ 96
No resultsSaved analysis from November 14, 2024 - stale
Analysis predates the current registration
The saved antivirus analysis is from November 14, 2024, which is before this domain's current registration, so it may describe an earlier owner. It is not counted as a clean result.
- Malicious
- 0
- Suspicious
- 0
- Total
- 96
All 96 engine results
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- Artists Against 419 - Clean
- AutoShun - Unrated
- Axur - Unrated
- benkow.cc - Clean
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- Chong Lua Dao - Clean
- CINS Army - Clean
- Cluster25 - Unrated
- CMC Threat Intelligence - Clean
- CRDF - Clean
- Criminal IP - Clean
- CSIS Security Group - Unrated
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Clean
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Feodo Tracker - Clean
- Forcepoint ThreatSeeker - Unrated
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- Gridinsoft - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- Kaspersky - Unrated
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- malwares.com URL checker - Clean
- MalwareURL - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- securolytics - Clean
- Snort IP sample list - Clean
- SOCRadar - Unrated
- Sophos - Clean
- Spam404 - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- ThreatHive - Clean
- Threatsourcing - Clean
- Trustwave - Clean
- Underworld - Unrated
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
Connect unlimited data 12 months · PKR 13,900 Message us on Instagram
What the captured page showed
2 observations- 01
Connect unlimited data 12 months · PKR 13,900
- 02
Message us on Instagram
What the page says about itself
What the site says about itself, quoted from the pages we read. The site wrote these words; they are not our findings.
- Page title
Desim — 12-Month Unlimited Data eSIM
- Meta description
12-month unlimited data eSIM for 200 countries. One payment, no contracts, 24/7 support.
Pages we read
- Main page/Read
03 · Investigation Story
Investigation story
What the site claims
Desim — 12-Month Unlimited Data eSIM
What we observed
The page content was captured and checked alongside 67 antivirus results.
What independent research found
The search completed without a material external warning or corroborating report.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Fake Shop & Commercial Deception
Service and business model
Shop
Observed behavior
Evidence behind this classification
- 01The registrable domain is only 9 days old, so the shop has no operating history or independent reputation.
- 02The site provides no company name, registration number, physical address, or direct contact email; only Instagram and an unspecified email are offered for support.
- 03The shop advertises a one-time upfront payment for 12 months of unlimited data, while its own comparison table notes that a fair-use policy applies to the unlimited allowance.
Web research findings
Independent findings for desim.online, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
No independently sourced scam reports or credibility records were found for desim.online. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domaindesim.online
- Redirects todesim.online
- Hosted byBrander Group Inc.
- Referencesfonts.googleapis.com · fonts.gstatic.com
Domain Timeline
- Oct 8, 2026Domain registered
First appeared in WHOIS records — 9 days old when this review was saved.
- Oct 18, 2026Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.
desim.online was registered very recently when this review was saved. Freshly-registered domains are disproportionately used for scams, so a young domain whose evidence is mixed or incomplete warrants extra caution.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No direct contact email found on the captured page.
Domain & Encryption
A certificate issued weeks or days before the scan on a domain registered recently is common on short-lived sites, though new legitimate sites look the same.
Certificate issued for desim.online.
A shared content-delivery network address answers for many sites, so it is not the site's own server and says nothing about who runs it.
Scripts, fonts and CDNs
- Google Fonts
- jsDelivr
Payment providers the page loads
None seen among the outside domains we saved.
Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.
Redirect Chain
- 1301http://desim.online/
- 2200https://desim.online/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
unknownMalware, phishing, credential theft and hostile infrastructure.
No confirmed evidence in this dimension.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
Orders are completed by messaging the seller on Instagram or email, where the seller confirms the device and price and then sends a QR code, bypassing any standard checkout or dispute process. · The shop advertises a one-time upfront payment for 12 months of unlimited data, while its own comparison table notes that a fair-use policy applies to the unlimited allowance.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 0 of 96 engines flagged | Limited | No saved finding | stale fallback · analysed Nov 14, 2024 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 18, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 18, 2026 |
| Visual evidence | 2 visible observations saved with the page capture | Completed | No adverse finding | this scan · Oct 18, 2026 |
| Independent research | The search completed without a material external finding | Completed | No adverse finding | this scan · Oct 18, 2026 |
- Antivirus
- Result0 of 96 engines flagged
- CompletionLimitedFindingNo saved finding
- Freshnessstale fallback · analysed Nov 14, 2024
- Browser protection
- ResultNo browser threat-list match
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 18, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 18, 2026
- Visual evidence
- Result2 visible observations saved with the page capture
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 18, 2026
- Independent research
- ResultThe search completed without a material external finding
- CompletionCompletedFindingNo adverse finding
- Freshnessthis scan · Oct 18, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is desim.online a scam or is it safe?
Is desim.online safe to use?
Has desim.online been flagged by antivirus engines?
Is desim.online on any phishing or malware blacklists?
How old is the desim.online domain?
Does desim.online have a valid SSL certificate?
Where is desim.online hosted?
How often is the desim.online report updated?
08 · Final Verdict
Final verdict
Nine-day-old eSIM shop takes orders only through Instagram and email, with no company identity or checkout
Desim is a brand-new storefront selling a '12-month unlimited data eSIM' for a one-time upfront payment, but it has no visible company name, address, or direct contact email, and it does not run a normal checkout. Instead, visitors are told to 'Message us on Instagram or email' so the seller can 'confirm your device and price, then send your QR code'. The domain is only 9 days old, and the only support channel offered is Instagram plus an unspecified email. The site has a valid encrypted connection and no current threat warnings, so there is no sign of malware or phishing, but the combination of an unverifiable operator, a very new domain, and an off-platform payment path is a classic setup for a buyer to pay and receive nothing. That mix of clean technical checks with serious operator-level risk places it in the Moderate Risk band.
09 · Community
Community
Are you the owner of desim.online?Verify and reply