primeubfinancials[.]com

primeubfinancials.com is currently active and returns HTTP 200. DNS resolution points to 163.61.188.2, an address mapped to the United States and associated with the MIT network. The domain was registered on 2026-04-09 through TuringSign Inc. d/b/a Cosmotown and uses a Let’s Encrypt certificate (YR1) with HTTP/3 support. Technical fingerprint shows LiteSpeed web server, Bootstrap, Font Awesome and HTTP/3 enabled. Infrastructure analysis shows a single MX record pointing to the domain itself, indicating no dedicated mail infrastructure. Reputation indicators are poor: the domain appears on the PhishDestroy blocklist, is cited in two AlienVault OTX pulses, and received a Gridinsoft trust score of 4/100. VirusTotal analysis reports 10 of 91 scanners flagging the host. The page title “Welcome | Prime Financials” provides no further context. While the site’s content has not been directly observed, the convergence of a recent registration, low trust score, blocklist inclusion, and multiple vendor detections strongly suggests a phishing operation. Defenders should block the domain at perimeter filters, monitor outbound connections to the IP, and add the host to internal threat intelligence feeds. Additional investigation of the web content is recommended to confirm the payload and capture any credential‑stealing forms.