Is primexbtf.net a scam? TrustSniffer's high-risk assessment: 0/100

Overview

PrimeXBT is the name shown on a single-page website at a recently registered ".net" domain. Its brief homepage carries only the "PrimeXBT" title and a short block of text, which reads like the front page of an online trading or crypto-derivatives service. The page's intended function cannot be established from its content. Judging by the name alone, it appears designed to be taken for a trading-platform front end that invites visitors to sign in or transact.

Scam/Impersonation Risk

This is the dominant issue. Several independent threat-intelligence engines currently flag the domain as malicious, and one more rates it suspicious. A separate external blacklist also lists it. The site is therefore blacklisted, and the contradictions are confirmed rather than speculative. The homepage presents itself under an established-sounding trading brand name, yet it is served from a different, recently registered domain whose spelling merely resembles that brand. Together with the listings, this fits a pattern of brand-lookalike abuse. The analysis did not confirm a specific impersonation target, a phishing form, or any conflicting legal-entity names, so the cautionary posture rests on the reputation listings and the brand-versus-domain mismatch. Behavioural testing found no wallet-connection prompts, clipboard tampering, hidden forms, or cloaking. It did observe repeated outbound data submissions from the homepage, some to destinations outside the site's recognised service set. For a site with no verified operator, that is an additional reason for concern. Taken together, the evidence calls for a clearly cautionary stance toward any sensitive interaction. Evidence:

• Homepage: the title presents the "PrimeXBT" brand name on a different, newly registered domain, with only a short block of text and no further substance.
• Homepage behaviour: of the outbound POST requests observed across test runs, 3 of 6 went to destinations outside the recognised service set, alongside 12 external background requests.
• Domain provenance: registered 2025-12-02 through Gname.com Pte. Ltd. (~0.9 years old, expiring 2026-12-02), so the domain is under a year old.
• Web-archive history: 3 snapshots, all captured in 2026 (first 2026-09-07, last 2026-09-21), across 1 year tracked. This shows no established prior history for the domain.

Regulatory Verification Notes

The captured homepage does not display a company name, licence, registry number, or regulatory authorisation. No legal or terms pages were available to examine. Nothing on the page connects the site to a real-world operator, and the operator's identity remains unverified. A site that names a financial-trading brand would be expected to disclose its regulated entity and licence details. Their absence here is a disclosure gap, not proof of wrongdoing, but it removes the usual means of reconciling the brand with the domain. No third-party broker-rating record was matched, so there is no external regulatory context to set against the reputation listings. Evidence:

• Homepage: no operating company, licence number, regulator reference, or physical address appears in the captured content.
• Hosting and transport: served from AS13335 (Cloudflare), and the TLS certificate was issued by WE1 as a domain-validated (DV) certificate, valid to 2026-12-22. DV validation confirms control of the domain only and says nothing about who operates it.
• Site identity: nothing on the page independently ties the site to the brand it displays.

What to Verify Next

Before any engagement, anyone who believes this site relates to the PrimeXBT brand should locate that brand's official domain through an independent route, such as a regulator's register or an established directory. They should then compare it with this domain, which should be treated as unaffiliated until the brand itself confirms otherwise. If a licence is claimed anywhere, it should be checked directly in the issuing regulator's public register. The official support and contact channels should also be confirmed through an offline or independently sourced route. Where the site has been reached through an unsolicited message or advertisement, that source should be reported and preserved. Evidence:

• Domain: registered under a year ago, with a brand-style title that the homepage does not support with any disclosure.
• Reputation: current malicious and suspicious listings from multiple engines and an external blacklist, which a later re-scan can confirm or clear.
• Homepage: no regulator or registry reference is presented to check.

Summary Verdict

The evidence converges on an elevated-risk posture. Confirmed blacklisting, a very young domain with minimal history, a brand-style name on an unrelated domain, and unexplained outbound submissions together outweigh the technically valid transport security. The site is assessed as unsafe for sensitive interactions, and its operator is unidentified.

Infrastructure Integrity

The site sits behind Cloudflare's CDN and WAF, and every observed address is an edge server; the origin server was not observable. This protection is a mitigating factor only. It prevents independent confirmation of where the content is actually hosted and can mask rapid content changes. It also cannot offset the external reputation listings, which are decisive here.

Closing Assessment

Treat the site as read-only at most. Do not sign in, enter credentials, or make any payment or deposit through it. Anyone who has already interacted with the site should change reused passwords and monitor linked accounts and payment instruments for unauthorised activity.