prime-host-365[.]net

This domain, prime-host-365.net, is currently under investigation for generic_phishing activity targeting users of the PrimeHost brand. Analysis indicates the domain mimics legitimate hosting service pages, as evidenced by the page title 'PrimeHost,' suggesting an intent to deceive users into entering credentials or financial information. No specific drainer kit signatures have been identified at this stage, but the domain exhibits characteristics consistent with credential harvesting infrastructure. Infrastructure analysis reveals the following technical indicators: the domain resolves to IP address 51.210.90.114 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on June 27, 2026. The SSL certificate is issued by Let's Encrypt, providing HTTPS encryption. As of the latest scan, VirusTotal reports 0/95 detections, indicating no antivirus engines have flagged the domain at this time. Google Safe Browsing (GSB) status is not explicitly listed, and no blocklist entries have been recorded. The domain remains active and unblocked across major security platforms. Current status is classified as active and under_investigation. No takedown actions have been initiated, and the domain continues to resolve. The absence of detections on VirusTotal does not preclude malicious intent, particularly given the recent creation date and impersonation of a known brand. Users are advised to block the domain at the network level, monitor for credential theft attempts, and verify hosting service communications through official PrimeHost channels only. Further analysis is required to determine the full scope of the phishing campaign and associated infrastructure.