primefaxview[.]live

Analysis of the domain primefaxview.live indicates active brand impersonation targeting Coinbase, a cryptocurrency exchange platform. The domain, registered on February 21, 2026, through Dynadot LLC, currently resolves to IP address 163.61.188.5, hosted on AS153568 (NEW DHAKA HARDWARE) in the United States. The page title, 'Jmtglobal is an award winning Forex and Commodities Broker,' does not directly reference Coinbase but aligns with financial scam themes, specifically crypto-related fraud as classified in available intelligence. Infrastructure analysis reveals the use of PHP, LiteSpeed, Alpine.js, jQuery, Cloudflare, Unpkg, SweetAlert2, and OWL Carousel, suggesting a dynamic web application designed for user interaction. The domain is served over HTTPS with a Let's Encrypt R12 SSL certificate and returns an HTTP 200 status, indicating an operational endpoint. Nameservers are hosted under lytehosting.com, a provider previously associated with malicious domains. As of July 12, 2026, the domain appears on one security blocklist and is actively blocked by PhishDestroy. No detections were reported by 95 vendors in a recent scan, though this does not confirm legitimacy. The domain's Gridinsoft trust score is 0/100, reinforcing its high-risk classification. Defenders should treat this domain as malicious and prioritize blocking or monitoring traffic to 163.61.188.5 and associated subdomains. Further investigation is required to determine the full scope of the scam, including whether it functions as a credential harvester, fake trading platform, or crypto drainer. No visual or behavioral analysis of the site has been conducted; all assessments are based on infrastructure and metadata.