financeprimes[.]com

This domain, financeprimes.com, is actively engaged in brand impersonation phishing targeting Mastercard. The site presents itself as a financial service under the page title "Financeprimes" but lacks legitimate affiliation with the payment network. Current infrastructure analysis confirms the domain remains operational and accessible as of the latest verification. Infrastructure analysis reveals the domain was registered on July 12, 2025, through Web Commerce Communications Limited. It resolves to the IP address 107.173.193.235, hosted on AS36352 (HostPapa) in the United States. Security vendor detection on VirusTotal indicates 12 of 95 engines flag the domain as malicious. The domain appears on one security blocklist, and no SSL certificate is present, further reducing its legitimacy. The absence of encryption and the use of a recently registered domain align with common phishing tactics. The domain remains active, posing a continued risk to users who may mistake it for an official Mastercard service. Organizations and individuals are advised to block the domain at the network level and update endpoint protection rules to include this indicator. Users encountering this site should avoid entering credentials or financial details. Security teams should monitor for related infrastructure, including domains registered through the same registrar or resolving to the same IP range, as additional threats may emerge from this actor.