primeblock-wallet[.]pro

The domain primeblock-wallet.pro was registered on 21 February 2026 and presently resolves to the IPv4 address 163.61.188.5. The address is announced by AS153568, identified as NEW DHAKA HARDWARE, and is geolocated to the United States. A TLS certificate labeled R11 is presented for the host, indicating the use of a low‑trust certificate. The web server responds with LiteSpeed and supports HTTP/3, suggesting a modern web stack despite the limited operational footprint.

Analysis of public threat intelligence shows that three of ninety‑three VirusTotal scanners have flagged the domain, reflecting limited but non‑trivial detection across automated engines. The domain is listed on a single security blocklist and holds a Gridinsoft trust score of zero out of one hundred, confirming a negative reputation. PhishDestroy has also blocked the host, and the page title returned during the last probe was “Account Suspended,” implying that the site has been taken offline, a status corroborated by the current offline indication in the intelligence feed. The threat classification is a crypto drainer, consistent with the “Crypto Scam” label in the source data.

No additional evidence such as phishing kit identifiers, brand impersonation, or Safe Browsing URLs is available. Consequently, the precise malicious payload or victim interaction flow remains unknown. Defenders should continue to monitor the IP address and associated ASN for new activity, enforce blocklist updates that include primeblock-wallet.pro, and consider adding the host to network‑level deny lists. Given the elevated risk rating, endpoint protection solutions should be configured to treat any attempted connections to the domain as malicious, and incident response teams should be alerted if logs indicate outreach from internal assets.