primeroyaltrustcapital[.]com

Analysis of primeroyaltrustcapital.com indicates a newly registered domain used for generic phishing. The domain was created on July 23, 2026 and is currently active. Registration was performed through Global Domain Group LLC, and the authoritative nameservers are ns10.controlpanelnet.com and ns9.controlpanelnet.com. DNS resolution points to the single IPv4 address 13.140.180.106.

The IP belongs to a hosting provider that frequently services short‑lived malicious sites, but no additional attribution such as ASN or geographic location is supplied in the available data. VirusTotal records show that 2 of 91 security vendors have flagged the domain, demonstrating that at least a small subset of scanners have identified malicious characteristics. The domain is listed on one public blocklist, PhishDestroy, confirming that at least one community‑driven feed has recognized it as a phishing resource. No SSL certificate details, HTTP response codes, page title, or Safe Browsing verdicts are present in the current intelligence, so the exact payload or impersonated brand cannot be confirmed.

Defenders should treat the domain as high‑risk based on its recent creation, active status, and detection signals. Recommended actions include adding primeroyaltrustcapital.com and its resolving IP 13.140.180.106 to network deny lists, monitoring DNS queries for the domain and its nameservers, and employing URL filtering solutions that reference the PhishDestroy blocklist. Continuous re‑scanning on VirusTotal and other multi‑engine platforms is advised to capture any emerging detection signatures. Organizations should also educate users about unexpected communications that request credentials or financial information, as the domain appears to be part of a broader phishing campaign despite the lack of publicly visible landing‑page details.