primetrustyfinance[.]xyz

The domain primetrustyfinance.xyz, which impersonates the brand 'foundation', has been taken offline. Despite its current status, the domain was flagged as malicious by 6 out of 95 vendors on VirusTotal. PhishDestroy identified this threat on November 6, 2025, highlighting its potential risk before broader detection.

Primetrustyfinance.xyz was registered with OwnRegistrar, Inc., and hosted on an IP address in France under AS51167 by Contabo GmbH. The site lacked SSL certification, a common trait among fraudulent sites aiming to mimic legitimate brands. The page title 'Home - Prime Trust Finance' further suggests an attempt to deceive users into believing they are interacting with a legitimate financial entity.

The impersonation of 'foundation' indicates a targeted attack strategy, leveraging the trust associated with the brand to capture sensitive information from unsuspecting users. The domain's platform risk score of 30/100 reflects its potential threat level, even as it remains offline. The inclusion of primetrustyfinance.xyz on a public blocklist, specifically by PhishDestroy, underscores the importance of early detection in mitigating such risks.