primetmfs[.]com

Analysis indicates that primetmfs.com was registered on 21 February 2026 via NameSilo, LLC and is currently hosted on the IP address 213.165.249.109, which belongs to AS22611 InMotion Hosting, Inc. in the Netherlands. The domain resolves to nameservers ns1.ns306.parklogic.com and ns2.ns306.parklogic.com, and an SSL certificate identified as R11 is present. The publicly visible page title reads “Primetimefx – Digital forex, binary option trade, Realestate, cryptomining and bitcoin investment financial solution…”, suggesting an attempt to lure victims with financial‑service terminology while explicitly referencing bitcoin. The threat classification is recorded as brand impersonation, with the target brand explicitly listed as Bitcoin.

VirusTotal scanning shows that one of ninety‑three security vendors flagged the domain, and the site appears on a single blocklist maintained by PhishDestroy. The domain has been taken offline as of the report date, but historical observations remain relevant for threat‑intelligence correlation. Defenders should add the resolved IP address and the domain name to network‑level deny lists, enforce DNS filtering that includes the PhishDestroy blocklist, and monitor for any resurgence of the host under the same IP or nameserver configuration. Because the registrar is NameSilo, investigators may request registration details if further attribution is required.

The presence of an SSL certificate indicates that TLS encryption was available, which does not mitigate the underlying brand‑impersonation risk. Continuous vigilance is advised for any new domains that reuse the same branding language or hosting infrastructure, as the short lifespan suggests a rapid‑deployment fraud campaign. Until the domain is fully reclaimed or the infrastructure is decommissioned, the elevated risk rating remains applicable.