primeworths[.]com

Analysis indicates that primeworths.com was registered on March 31 2026 through Automattic Inc. The domain resolves to the IP address 104.194.9.178 in the US under AS23470 ReliableSite.Net LLC and presents an SSL certificate from R3 while returning an HTTP status of 200. Infrastructure analysis reveals that the domain is flagged by one security blocklist operated by PhishDestroy and receives a Gridinsoft trust score of zero out of one hundred. VirusTotal reports detections from five out of ninety five vendors. The domain remains active on the report date of July 12 2026.

The threat classification identifies brand impersonation targeting Google combined with a tech support scam type. The recorded page title references crypto forex and stock trading but the precise site content and operational mechanics have not been examined. Registration details and IP location provide concrete indicators of recent infrastructure that aligns with known patterns of short lived domains used in impersonation campaigns.

Uncertainty remains regarding the full scope of any associated campaigns or additional domains operated by the same entity since only this single domain appears in the current intelligence set. The exact duration of activity prior to blocklist inclusion and the specific methods of tech support delivery cannot be determined from the available data alone.

Defenders should implement blocks on both the domain primeworths.com and the resolving IP 104.194.9.178 at network and endpoint levels. Continued monitoring of the registrar Automattic Inc. for similar registrations and cross referencing with the existing blocklist entry from PhishDestroy will support timely response. Sharing the VirusTotal detection ratio and Gridinsoft score with internal threat intelligence platforms can aid prioritization of remediation efforts.