premarket-stable[.]com

The domain premarket-stable.com is actively serving a HTTP 403 response and presents a page title identical to the domain name. VirusTotal analysis shows that 2 of 93 security vendors have flagged the site, indicating a consensus of malicious intent despite limited detection coverage. The domain resolves to IP 188.114.96.3, which is owned by AS13335 Cloudflare, Inc. and is located in the United States. Cloudflare services are confirmed by the presence of Cloudflare Browser Insights, the generic Cloudflare product tag, and HTTP/3 support.

The SSL certificate is issued by Google Trust Services under the WE1 identifier, providing TLS encryption but offering no assurance of legitimacy. The registrar listed is NiceNIC International Group Co., Limited and the domain was created on 21 February 2026, making it a relatively new registration. Reputation metrics are poor: a Gridinsoft trust score of 0 / 100 and inclusion on at least one security blocklist, specifically PhishDestroy, which classifies the site as a phishing vector.

No additional intelligence such as Safe Browsing, OTX, or brand‑specific references is available, leaving the exact phishing campaign details unknown. Defenders should immediately block premarket-stable.com at perimeter firewalls and DNS filtering solutions, monitor outbound connections for any attempts to resolve the IP address, and consider adding the IP to threat intelligence feeds. Continuous observation of Cloudflare‑hosted assets linked to this address is advised, as the infrastructure could be repurposed for further malicious activity.