primemarkettrade[.]com

The domain primemarkettrade.com was registered on 31 January 2026 through Tucows Domains Inc. and currently resolves to the Cloudflare‑hosted address 104.21.71.232. The authoritative nameservers are dan.ns.cloudflare.com and zita.ns.cloudflare.com, indicating that the infrastructure is hosted behind Cloudflare's CDN and likely benefits from the provider's built‑in DDoS mitigation. Threat intelligence from AlienVault OTX shows the domain appearing in three separate pulses, and it is listed on one public security blocklist. The PhishDestroy service also reports the domain as blocked, confirming that active mitigation measures are already in place.

VirusTotal analysis shows that seven out of ninety‑one scanned security vendors have flagged the domain, suggesting a non‑trivial malicious reputation despite the relatively low detection count. No public evidence of the site’s page title, SSL certificate details, HTTP response codes, or Safe Browsing rating is available, so the exact nature of the hosted content cannot be confirmed beyond the generic phishing classification. The available data points collectively indicate a high‑risk phishing infrastructure that is still operational as of the report date (27 July 2026).

Defenders should ensure that DNS queries for primemarkettrade.com are blocked at the resolver level, add the IP address 104.21.71.232 to network‑level deny lists, and incorporate the domain into endpoint and web‑gateway blocklists. Continuous monitoring of the associated Cloudflare nameservers for any changes, as well as periodic re‑scanning on VirusTotal or similar platforms, is recommended to detect potential escalation or the emergence of additional payloads. Because the domain is relatively new, threat actors may still be testing delivery vectors, making early detection and rapid response critical to prevent credential harvesting or other phishing‑related compromise.