domainprime[.]sa[.]com

Analysis of domainprime.sa.com indicates active credential-phishing infrastructure as of July 12, 2026. The domain resolves to IP address 66.85.47.26 and is registered through Cloudflare, Inc. Detection metrics show 12 of 95 security vendors flagging the domain on VirusTotal, while it appears on three distinct security blocklists: PhishDestroy, PhishingDB, and BLP-Malware. The page title, 'Energen - Free Bootstrap 4 Template by Colorlib,' suggests the use of a publicly available website template, a common tactic to lend superficial legitimacy to phishing pages. Automated trust assessments assign scores of 1/100 and 0/100, reinforcing the high-risk classification. No brand impersonation is explicitly identified in the available data, though the use of a generic template may indicate an attempt to harvest credentials without targeting a specific organization. The domain remains active, and defenders should treat it as a confirmed phishing endpoint. Network-level blocking at 66.85.47.26 or domain-level filtering via the listed blocklists is recommended. Further investigation into the hosting provider and registrar may reveal additional linked infrastructure, though no additional indicators are currently available.