primeminers[.]io

Analysis of primeminers.io indicates that the domain is actively used for phishing. VirusTotal records show 7 of 91 scanned security vendors flag the domain as malicious, suggesting a consensus among multiple engines of suspicious behavior. The domain is listed on at least one public security blocklist and is explicitly blocked by the PhishDestroy service, confirming that it has been observed delivering fraudulent content. DNS resolution points to the IPv4 address 198.54.120.225; the host does not appear to be a known cloud provider and is likely a dedicated server used by the operators.

Registration data reveal that the domain was created on 2 May 2022 through Namecheap Inc., and the authoritative name servers are dns1.namecheaphosting.com and dns2.namecheaphosting.com, both typical of Namecheap‑hosted domains. No evidence of SSL/TLS certificates, HTTP response codes, or page titles has been published, so the current surface of the site remains uncharacterized. The persistence of the domain for more than four years, combined with multiple vendor detections and blocklist listings, raises its risk rating to high.

Defenders should add 198.54.120.225 and primeminers.io to network‑level deny lists, enforce URL filtering in web proxies, and monitor DNS queries for the domain. Incident response teams should treat any credential or payment information submitted to this domain as compromised and advise affected users to reset credentials. Continuous re‑inspection of the site for changes in hosting, SSL adoption, or new phishing pages is recommended.