prime-link[.]buzz
Forensic brief
PhishDestroy has identified prime-link.buzz as an active crypto drainer domain designed to steal cryptocurrency from unsuspecting users. The site poses as a legitimate crypto service portal, tricking victims into connecting their wallets and authorizing fraudulent transactions. Once connected, the drainer silently transfers assets to attacker-controlled addresses without requiring additional permissions. Security researchers note that this technique bypasses traditional wallet security by exploiting user trust during the initial authentication phase, making it particularly dangerous for users interacting with decentralized finance platforms. This domain resolves to IP address 45.147.197.100 and currently shows 0/95 detections on VirusTotal, indicating that most antivirus engines have not yet identified its malicious nature. The domain uses a Let's Encrypt SSL certificate to appear legitimate, though this provides no actual security benefit against crypto drainer functionality. The infrastructure shares hosting with other high-risk domains, and the domain was likely registered recently given its minimal detection history. These technical indicators suggest an emerging threat rather than an established campaign, which makes early detection and blocking even more critical. Users who have visited prime-link.buzz should immediately disconnect their wallets from any unauthorized connections and transfer remaining assets to a clean wallet. Check transaction history for any suspicious outbound transfers and report them to your wallet provider immediately. Use browser security extensions that block known malicious domains and consider revoking any wallet connections made while visiting this domain. Maintain constant vigilance when interacting with crypto services, and verify URLs through official channels before entering any wallet information.
Threat response pipeline
Cloudflare Radar
VirusTotal
Forensic Evidence Collectionabuse@server-panel.net with forensic evidence (metadata, screenshots, PDF).Evidence capture
Domain Intelligence
NameSilo, LLC
Technical details
Public blocklist status
Technologies
Technologies · 2 identified
VirusTotal consensus
Aggregated detection across 95 security vendors.
Site performance
Site performance analysis
Google PageSpeed Insights — mobile audit of prime-link.buzz
Evidence & external reports
Were you affected by this site?
Were You Affected?
Report to your local authorities
Email template — registrar abuse
abuse@server-panel.net
Registrar: NameSilo, LLC Case: PD-PD-20260515-688BCB
Embed this report
About this report
About this report: prime-link.buzz
This domain security report is maintained by PhishDestroy's automated threat-intelligence pipeline. Our system continuously monitors this domain across 95 security vendors on VirusTotal and 1 public blocklists.
The site displays a page titled “Prime Market | Verified Links | 2026”.
prime-link.buzz has been flagged by 2 security vendors as of May 17, 2026.
If you believe this listing is inaccurate, you can submit an appeal. For more information about our methodology, visit our FAQ page.