prime-market-link[.]lol

The domain prime-market-link.lol has been identified as a high-risk phishing threat with a focus on impersonating elements of the darknet. It was created on May 15, 2026, and remains active as of July 12, 2026. The page title associated with this domain is 'Prime Darknet - Mirrors,' which suggests potential malicious intent aimed at users interested in darknet services. The domain is registered through Dynadot LLC and has resolved to the IP address 45.147.197.100.

Analysis from threat intelligence platforms indicates that prime-market-link.lol is linked to 16 threat intelligence pulses on AlienVault OTX, underscoring its prevalence in phishing-related activities. Additionally, the domain has a trust score of 0 out of 100 from Gridinsoft, which highlights its dangerous nature. Despite utilizing a valid SSL certificate from Let's Encrypt, this should not be construed as a measure of safety, as the presence of encryption does not mitigate phishing risks associated with the site.

The domain has been reported on various security blocklists, including PhishDestroy and BLP-Malware, confirming its recognition as a phishing threat. In a broader scan on VirusTotal, the domain was flagged by 4 of 95 security vendors, reinforcing suspicions about its legitimacy. The relatively high detection counts and the active presence on multiple security platforms indicate a concerted effort to spread phishing activities linked to this domain.

Defenders are advised to implement comprehensive monitoring of domain activities and utilize threat intelligence feeds to track any updates related to prime-market-link.lol. Steps should include blocking the domain and any associated IPs to prevent potential threats. Given the current state of intelligence, ongoing vigilance is essential as attackers may continue to evolve their tactics to target unsuspecting users through similar phishing schemes.