primewealthinvestments[.]com

This domain, primewealthinvestments.com, was registered on 5 January 2026 through OwnRegistrar, Inc. and is currently resolved to the IP address 5.9.79.124. The authoritative name servers listed are dns1.harmonweb.net, dns2.harmonweb.net and a placeholder entry “null”. The domain remains active as of the report date (27 July 2026) and has been listed on a single security blocklist.

Detection services have identified it as malicious: PhishDestroy reports the domain as blocked, and VirusTotal analysis shows 14 of 91 scanned security vendors flagging it as malicious. No additional public indicators such as Safe Browsing entries, Open Threat Exchange tags, SSL certificate details, HTTP response codes, or trust scores are available in the current intelligence set. The presence of multiple detections across reputable scanning engines, combined with active blocklist status, strongly suggests the domain is being used for a generic phishing operation.

However, the specific payload, target audience, or compromised credentials have not been disclosed, leaving the exact phishing vector uncertain. Defenders should immediately add primewealthinvestments.com to URL filtering and web proxy block lists, monitor DNS queries for the associated IP address 5.9.79.124, and enforce email gateway rules to flag messages containing this domain. Continuous re‑evaluation of threat intelligence feeds for any new indicators, such as additional blocklist listings or updated VirusTotal scores, is recommended to maintain up‑to‑date protection.