# craftprimetrade.com — MALICIOUS

> CraftPrimeTrade.com is flagged for phishing risks. Avoid interaction and protect your data by steering clear of this suspicious domain.

## Summary
PhishDestroy identifies craftprimetrade.com as an active phishing threat leveraging social engineering tactics to deceive users. This domain aims to harvest sensitive information by masquerading as a legitimate trading or financial service platform. Due to its deceptive nature, users are at heightened risk of credential theft and fraud when engaging with this site.

Technically, craftprimetrade.com resolves to IP address 158.220.124.22 and was registered recently on August 12, 2023, through OwnRegistrar, Inc., a registrar often associated with high-risk or suspicious registrations. Google Safe Browsing has labeled the domain under "SOCIAL_ENGINEERING," confirming its intent to mislead users. Additionally, 12 out of 95 security vendors on VirusTotal have flagged this domain, further validating its malicious intent and reinforcing the domain's credibility as a phishing threat within cybersecurity circles.

Currently, craftprimetrade.com remains active and represents a high-risk phishing domain. PhishDestroy strongly advises users and organizations to avoid any interaction with this domain and to employ robust security measures such as updated phishing filters and endpoint protections. Monitoring network traffic for access attempts and educating end-users on the risks posed by such fraudulent sites are critical steps to mitigate potential harm associated with this threat. Immediate blocking and reporting of suspicious activity linked to this domain are paramount to safeguarding sensitive information.

## Threat Details
- Verdict: MALICIOUS
- Site status: alive (HTTP 530)
- Page title: craftprimetrade.com/

## Domain Intelligence
- Registered: 2026-03-10 13:07:01
- Registrar: OwnRegistrar, Inc.
- Country: US
- IP: 158.220.124.22
- IP Country: FR
- IP City: Lauterbourg
- IP Org: AS51167 Contabo GmbH
- Nameservers: ns1.zunxoo.com ns2.zunxoo.com null
- SSL Issuer: none

## Detection Status
- VirusTotal: 12 vendors flagged
  Vendors: ["ADMINUSLabs", "alphaMountain.ai", "BitDefender", "CyRadar", "ESET", "Fortinet", "G-Data", "Kaspersky", "Lionic", "Netcraft", "Sophos", "VIPRE"]
- Google Safe Browsing: FLAGGED
- Blocklists: 2 hits
  Lists: ["PhishDestroy", "MetaMask"]

## Live Page Content

### Page Text
Forbidden

## Evidence
- Screenshot: https://urlscan.io/screenshots/019cce20-05cd-769b-922c-e0faf9c91e71.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/4490d8f5-6842-4259-9e32-61702c327398
- PhishDestroy: https://phishdestroy.io/domain/craftprimetrade.com/
- LLM endpoint: https://phishdestroy.io/domain/craftprimetrade.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/craftprimetrade.com/
Last updated: 2026-03-15