primexdata[.]com[.]ng

PhishDestroy identifies primexdata.com.ng as a confirmed phishing site impersonating a mobile payment service provider. This domain was engineered to mimic legitimate instant recharge platforms for airtime, data bundles, cable TV subscriptions (DSTV, GOTV, STARTIMES), and electricity bill payments. As of the latest scan, the site is currently offline, indicating a proactive takedown response, though the threat remains relevant for users who may have encountered it during its active period.

This domain was flagged by 1 of 95 VirusTotal security vendors, indicating a low but notable detection rate, and was associated with IP address 148.72.153.160. The domain utilized a Let's Encrypt SSL certificate, a tactic frequently abused by threat actors to lend false legitimacy to fraudulent sites. While the precise registrar and creation date are not specified in available intelligence, the site's association with a known hosting infrastructure and its singular detection point suggest a short-lived campaign likely designed for rapid deployment and evasion.

As primexdata.com.ng is now offline, the immediate risk to users is reduced but not eliminated. Individuals who interacted with this domain—particularly those who entered payment or personal information—are advised to monitor financial accounts for unauthorized activity and consider initiating account recovery procedures with their mobile service providers. Users should remain vigilant against similar fraudulent sites and consult PhishDestroy’s updated threat intelligence for real-time alerts. Exercise increased caution when receiving unsolicited recharge or bill payment links via email, SMS, or social media.