primeaxiscapital[.]cyou

PhishDestroy identifies primeaxiscapital.cyou as a generic phishing threat, specifically a crypto drainer designed to steal cryptocurrency wallet credentials and funds. The domain impersonates Prime Axis Capital, a legitimate financial entity, to trick users into connecting their wallets or entering sensitive information. This threat poses a high risk of financial loss, as crypto drainers can automatically transfer assets once a user interacts with the site.

The evidence against this domain is substantial. VirusTotal reports that 3 out of 95 security vendors flag the domain as malicious, indicating it is actively recognized as a threat. The domain was created on April 21, 2026, which is relatively recent, a common trait among phishing domains. It is registered through FewMoreTaps OU, a registrar known for hosting questionable sites. The domain resolves to IP 198.251.89.144, and its SSL certificate is issued by Let's Encrypt / R12, which provides encryption but does not validate legitimacy. Additionally, the domain appears on 1 security blocklist, confirming its malicious reputation. The page title, "Prime Axis Capital," is a direct impersonation of the legitimate firm.

If a user has visited primeaxiscapital.cyou, they should immediately disconnect any connected wallets and revoke permissions for the site using a blockchain explorer or wallet security tool. It is also advisable to run a full antivirus scan and monitor accounts for unauthorized transactions. Users should never interact with unsolicited links or provide wallet credentials on unfamiliar sites. PhishDestroy recommends verifying all financial platforms through official channels before engaging.