invrestifyprime[.]net

The domain invrestifyprime.net was registered on 16 January 2026 through Namecheap Inc. Its authoritative name servers are dns1.registrar-servers.com and dns2.registrar-servers.com, and the domain resolves to the IPv4 address 75.2.60.5. VirusTotal has recorded a scan by 91 antivirus and URL‑reputation engines, none of which returned a positive detection at the time of analysis. The site is currently listed on a single public blocklist and is actively blocked by the PhishDestroy feed, confirming that threat‑intelligence sources consider it malicious.

The campaign classification provided in the intelligence set is “generic phishing”, and the reporting status is marked as active with a risk level of “under investigation”. No additional artifacts such as SSL certificate details, HTTP response codes, page titles, or brand references have been disclosed, leaving the exact content and luring technique of the site unverified. Infrastructure observations are limited to the single IP address and the registrar‑level hosting configuration; no ASN or geographic attribution is available in the source data.

Defenders should add invrestifyprime.net to network‑level URL filtering and DNS‑blocking policies, monitor for outbound connections to 75.2.60.5, and correlate any authentication attempts against this domain with user activity logs. Continuous re‑evaluation is advised, as the lack of detections on VirusTotal does not guarantee benign behavior, and the active blocklist entry indicates that the domain is presently being used for credential‑ harvesting.