prime-market-darknet[.]lol

This domain, prime-market-darknet.lol, was set up to impersonate a darknet marketplace, likely to steal login credentials from visitors. By mimicking the official Prime Darknet Market interface, the site tricks users into entering sensitive information, which could then be used for account takeover or further fraud. The page title even included a future timestamp, suggesting the operators were trying to appear legitimate and up-to-date.

PhishDestroy can confirm the threat through multiple indicators. The domain was created on May 27, 2026, via Dynadot LLC, and was flagged by 2 out of 95 security vendors on VirusTotal. It also appeared on one security blocklist and was ultimately taken offline. The site used a Let's Encrypt SSL certificate and resolved to IP address 45.147.197.100. These technical details, combined with the suspicious page title, paint a clear picture of a phishing operation targeting users of darknet markets.

If you visited this site, do not enter any credentials or personal information. Change passwords on any accounts you may have used there immediately, and enable two-factor authentication where possible. Monitor your accounts for unusual activity and consider running a security scan on your device. Stay vigilant against similar impersonation domains by always verifying URLs and relying on official sources.