prime-main[.]cfd

The domain prime-main.cfd is currently under investigation for generic phishing, specifically targeting users of the Prime Darknet Market. This domain was flagged based on its page title, which explicitly claims to be the 'Prime Market Link Official 2026' and 'Prime Darknet Market Main', indicating a clear impersonation of a legitimate darknet marketplace. PhishDestroy assesses this as a high-risk threat due to the nature of the impersonation and the potential for credential theft or financial fraud.

Technical indicators show that the domain was registered through Dynadot LLC on May 15, 2026, and resolves to IP address 45.147.197.100. It uses a Let's Encrypt SSL certificate (YR1) and has been identified in one threat intelligence pulse on AlienVault OTX. Despite being listed on one security blocklist, VirusTotal reports 0 out of 95 security vendors detecting it as malicious, which highlights the threat's ability to evade initial detection. The domain is currently offline, but its previous activity poses risks to users who may have encountered it.

To stay safe, users should never enter credentials or personal information on domains impersonating darknet markets. Always verify the legitimacy of such sites through trusted sources like PhishDestroy. If you have interacted with prime-main.cfd, change your passwords immediately and monitor accounts for unauthorized activity. Report any phishing attempts to relevant authorities and consider using a password manager to avoid reusing credentials across sites.