primextradingltd[.]com

Analysis of primextradingltd.com shows a domain that was created on January 31, 2024 and remains active as of the report date, July 27, 2026. The domain resolves to the IP address 79.133.41.61 and is hosted on nameservers ns1.ultahost.com, ns2.ultahost.com, ns3.ultahost.com, and ns4.ultahost.com. Registration was performed through Web Commerce Communications Limited operating under the trade name WebNic.cc.

VirusTotal scans indicate that 13 of 91 security vendors have flagged the domain, suggesting a moderate level of detection across the security community. The domain is currently listed on one security blocklist and has been explicitly blocked by the PhishDestroy service, reinforcing the perception of malicious use. No additional telemetry such as SSL certificate details, HTTP response codes, or page titles is available, leaving the exact content and lure mechanisms unverified.

Defenders should prioritize adding the domain and its resolving IP 79.133.41.61 to DNS and proxy blocklists, monitor outbound traffic for connections to this host, and consider sharing the indicator of compromise with upstream threat‑intel feeds. Continuous re‑evaluation is advised, as the lack of publicly disclosed page content means the threat actor could adapt the site to target specific brands or credential‑capture flows. Maintaining visibility through regular VirusTotal re‑scans and cross‑checking against emerging blocklists will help ensure timely detection of any escalation or new variants associated with this infrastructure.