prime-fact75875[.]com

The domain prime-fact75875.com was registered on July 23, 2026 through TUCOWS.COM, CO. It is currently active and resolves to the IPv4 address 95.170.13.191. The domain is listed on two public blocklists and is actively blocked by PhishDestroy and OpenPhish, indicating that at least some security vendors have identified it as malicious. VirusTotal has recorded 23 detections out of 91 scanned vendors, confirming a high level of consensus that the domain is being used for phishing.

The authoritative name servers are 1-you.njalla.no, 2-can.njalla.in, and 3-get.njalla.fo, which are typical of services used by threat actors to quickly provision domains. No public information about the site’s page title, SSL certificate, or HTTP response has been disclosed, so the exact content and the specific brand being impersonated remain unknown. The limited age of the domain (less than a week old) and the rapid deployment of blocklist entries suggest a short‑lived phishing campaign.

Defenders should add the IP address 95.170.13.191 and the domain prime-fact75875.com to deny‑list rules, monitor DNS queries for the listed name servers, and continue to track any new detections from additional scanning services. Because the domain is already flagged by multiple reputable feeds, network perimeter controls that enforce blocklist filtering are expected to mitigate user exposure. Ongoing surveillance is advised to capture any later‑stage infrastructure changes or potential payload hosting that may appear as the campaign evolves.