stockprimemarket[.]com

This domain, stockprimemarket.com, is flagged as an active phishing site targeting investment-related fraud. Registered on March 4, 2026, through Global Domain Group LLC, the domain resolves to the IP address 198.251.83.106. The page title, "Stockprimemarket | investissement Sûr avec Stockprimemarket," explicitly promotes secure investment opportunities, a common tactic in financial scams. Analysis indicates the site remains operational as of July 12, 2026, with no evidence of takedown or mitigation efforts. Infrastructure analysis reveals the domain is hosted on a Let's Encrypt SSL certificate, a frequent choice for malicious actors due to its low-cost and automated issuance process. Security vendors have flagged the domain, with 6 out of 95 engines on VirusTotal detecting it as malicious. Additionally, the domain appears on four security blocklists and has been referenced in 24 threat intelligence pulses on AlienVault OTX, suggesting widespread recognition as a threat. The Gridinsoft trust score of 0/100 further corroborates its classification as high-risk. The exact nature of the phishing operation remains partially unclear due to limited content analysis. While the page title suggests an investment scam, no specific brand impersonation or phishing kit has been confirmed. Defenders should treat this domain as an active threat, particularly for users involved in financial or investment platforms. Network-level blocking is recommended, along with monitoring for connections to the IP address 198.251.83.106. Organizations should also review logs for any interactions with this domain or its associated infrastructure, as it may be part of a broader campaign targeting similar victims. No further details about the scam mechanics or victim profiles are available at this time.