primepace[.]asia

Analysis of the domain primepace.asia shows that it was registered on February 26, 2026 through Web Commerce Communications Limited. The domain resolves to the IP address 188.114.97.3, which is associated with AS13335 Cloudflare, Inc., locating the hosting infrastructure in the United States. The authoritative nameservers are damiete.ns.cloudflare.com and meg.ns.cloudflare.com, both belonging to Cloudflare’s DNS service. The site currently returns a Cloudflare‑generated page titled “Suspected phishing site | Cloudflare” and has no SSL certificate configured, indicating that TLS was not provisioned for the host.

VirusTotal scans report that six of ninety‑three security vendors flagged the domain, providing modest corroboration of malicious intent. The domain appears on a single security blocklist and has been specifically blocked by the PhishDestroy service, confirming that at least one external mitigation platform has taken action. The site status is listed as offline, suggesting that the malicious content has been taken down or the hosting has been terminated. Defenders should continue to block the domain and its associated IP address at perimeter defenses, monitor for any re‑registration attempts, and consider adding the IP to reputation‑based blocklists.

Ongoing observation of Cloudflare‑hosted infrastructure is advised, as threat actors frequently reuse Cloudflare services for new campaigns. Since no TLS certificate is present, attempts to establish encrypted connections will fail, providing an additional indicator for detection rules. The limited detection footprint—six vendor flags and one blocklist entry—means that broader threat‑intel platforms may not yet have full context, so organizations should treat the indicator with elevated caution and incorporate it into phishing‑specific threat‑monitoring feeds.