primeinvestfx[.]com

The domain primeinvestfx.com was registered on 09 November 2024 through the registrar HOSTINGER operations, UAB. DNS resolution points to the address 92.113.23.195 and the authoritative name servers are ns1.dns-parking.com and ns2.dns-parking.com, which are commonly associated with parking services rather than dedicated hosting. The domain appears on a single public blocklist; it is listed by PhishDestroy as a malicious entry and remains active as of the report date, 27 July 2026. VirusTotal records indicate that the domain was submitted for analysis and examined by 91 scanning engines, none of which generated a detection at the time of scanning.

While the lack of detections does not constitute evidence of benign intent, it does demonstrate that automated signatures have not yet identified known malicious payloads tied to this host. The combination of a relatively recent registration date, use of generic parking name servers, and inclusion on a phishing‑specific blocklist suggests that the domain is being leveraged for a generic phishing campaign, consistent with the threat classification provided. However, without direct observation of the hosted content, the exact phishing vector, target brand, or credential‑stealing mechanisms cannot be confirmed.

Defenders should block network connections to 92.113.23.195 and add primeinvestfx.com to local deny lists. Monitoring for any future changes in DNS records, additional blocklist listings, or the emergence of detections from sandbox or endpoint products is recommended. Organizations employing email filtering should treat any messages referencing primeinvestfx.com as suspicious and apply quarantine or reject policies until further verification is possible.