axel-prime[.]com

Analysis of axel-prime.com indicates it was a phishing domain targeting institutional investors, though it is currently offline. The domain was created on February 21, 2026, and resolved to IP address 198.12.66.123, hosted on AS36352 (HostPapa) in the United States. The page title, 'Axel-prime Inc. - Innovative solutions for institutional investors,' suggests an attempt to impersonate a legitimate financial services provider, though no specific brand imitation was confirmed beyond this title.

The domain appears on one security blocklist and was flagged by PhishDestroy, though no detections were recorded by the 93 vendors that scanned it on VirusTotal at the time of analysis. The absence of detections does not confirm safety, as phishing infrastructure often evades initial scans. The SSL certificate (R10) is a low-trust indicator, commonly associated with short-lived or disposable domains.

As of July 25, 2026, the domain is offline, but defenders should monitor for reactivation or related infrastructure. Organizations should treat this domain as high-risk for credential harvesting or financial fraud targeting institutional clients, particularly given its thematic focus. No evidence of a phishing kit or additional brand targeting was provided, so further investigation into hosting patterns and historical DNS records is recommended to assess broader campaign linkages.