primemarket-pro[.]live

This domain, primemarket-pro.live, was registered on June 9, 2025, through OwnRegistrar, Inc., and remains active as of July 12, 2026. Infrastructure analysis reveals it resolves to the IP address 198.23.190.194 and uses a Let's Encrypt SSL certificate. The domain is explicitly flagged for brand impersonation, targeting the financial services entity 'across,' though the exact nature of the impersonation—whether related to trading platforms, investment schemes, or other services—is not yet confirmed due to limited content analysis. The page title, 'PV-Market | Access a Wealth of Trading Opportunities,' suggests a focus on trading or investment opportunities, aligning with common phishing themes in this sector. The domain appears in 23 threat intelligence pulses on AlienVault OTX, indicating widespread recognition within the security community as malicious infrastructure. Five of 95 security vendors on VirusTotal detect the domain as malicious, though the absence of detections from other vendors does not imply safety. It is currently blocked by at least two security blocklists, including PhishDestroy and BLP-Malware, and holds a trust score of 0/100 from Gridinsoft, reinforcing its high-risk classification. Defenders should treat this domain as active phishing infrastructure, particularly in environments where 'across' or similar financial brands are relevant. Monitoring for connections to 198.23.190.194 or DNS resolutions to primemarket-pro.live may aid in identifying compromised endpoints or ongoing attacks. No evidence currently links this domain to a specific phishing kit or broader campaign, but its registration age and blocklist presence suggest it is part of established malicious operations. Further analysis of the site’s content and backend infrastructure could clarify its exact tactics, though such investigation was not conducted for this report.