primeclub[.]cc

This domain, primeclub.cc, is flagged as an active brand impersonation threat targeting Base, a known blockchain platform. Registered on January 28, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain presents itself as a crypto casino under the title 'Primeclub: Most Popular Online Crypto Casino Based on Blockchain.' Infrastructure analysis reveals the use of Cloudflare, which resolves to the IPv6 address 2606:4700:3036::6815:47b, alongside tracking technologies such as Twitter Ads and Facebook Pixel, suggesting coordinated promotional efforts to lure victims. The domain appears in 14 threat intelligence pulses on AlienVault OTX and is blocked by two security blocklists, including PhishDestroy and BLP-Malware. Fourteen out of 95 security vendors on VirusTotal have flagged primeclub.cc, indicating broad consensus on its malicious nature. The presence of the Gambler Scam phishing kit further confirms its classification as a fraudulent operation, designed to deceive users into engaging with a fake gambling platform under the guise of legitimacy. While the SSL certificate is issued by Google Trust Services, a common practice among both legitimate and malicious sites, this does not mitigate the domain's risk. The Gridinsoft trust score of 0/100 underscores the severity of the threat. Defenders should note that the domain remains active as of July 12, 2026, and is likely part of a larger campaign leveraging blockchain-themed lures to exploit users' trust in cryptocurrency platforms. Organizations and users are advised to block access to primeclub.cc at the network level and monitor for related indicators of compromise. The combination of brand impersonation, phishing kit deployment, and active tracking technologies suggests a well-organized operation with potential ties to broader fraud networks. No evidence currently indicates compromise of legitimate Base infrastructure, but the domain's persistence and promotional tactics warrant heightened scrutiny.