# primebremer.com — SUSPICIOUS

> PhishDestroy analyzes primebremer.com, a medium-risk phishing domain impersonating generic banking. Learn about its infrastructure and current offline status.

## Summary
PhishDestroy identifies primebremer.com as a medium-risk phishing domain engaging in brand impersonation targeting generic banking customers. The domain uses the page title "Prime Bremer Bank - Dedicated to innovating, simplifying, and humanizing digital banking" to mimic legitimate financial institutions and lure victims.

The domain resolves to IP address 198.251.89.220 and was registered through Cosmotown, Inc. on February 21, 2026. It is listed on one security blocklist and has been flagged by three out of ninety-five security vendors on VirusTotal, indicating some detection but limited widespread recognition. The infrastructure suggests a typical phishing setup with moderate detection rates.

Currently, primebremer.com is offline, reducing immediate risk to users. PhishDestroy recommends continued monitoring for potential reactivation or use of similar domains. Users should remain cautious of communications referencing this or related domains, as brand impersonation remains a common tactic in phishing campaigns.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Prime Bremer Bank - Dedicated to innovating, simplifying, and humanizing digital banking.

## Domain Intelligence
- Registered: 2026-02-21 07:01:08
- Registrar: Cosmotown, Inc.
- Country: US
- IP: 198.251.89.220
- IP Country: US
- IP City: Cheyenne
- IP Org: AS53667 FranTech Solutions
- Nameservers: ns27.asurahosting.com ns27.my-control-panel.com ns28.asurahosting.com ns28.my-control-panel.com
- SSL Issuer: Let's Encrypt / R12

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["Fortinet", "Netcraft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 1 hits
  Lists: ["PhishDestroy"]

## Evidence
- Screenshot: https://urlscan.io/screenshots/019c7611-5076-7520-88b4-4da4e8227de9.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/cf24c15b-302a-42bd-8438-946b7a64e9c5
- Wayback Machine: https://web.archive.org/web/https://primebremer.com
- PhishDestroy: https://phishdestroy.io/domain/primebremer.com/
- LLM endpoint: https://phishdestroy.io/domain/primebremer.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/primebremer.com/
Last updated: 2026-03-19