Analysis indicates that drk-market-moriarty.com was registered on July 19, 2026 through Fewmoretaps OU d/b/a Trustname.com. The domain resolves to 104.21.93.137 and uses Cloudflare nameservers igor.ns.cloudflare.com and jean.ns.cloudflare.com. It is currently active and appears on one security blocklist; PhishDestroy has already added it to its blocklist.
VirusTotal has processed the domain with 91 scanning engines, none of which reported a detection, but the absence of a detection does not constitute a safety guarantee. The short age of eleven days and the presence of a Cloudflare‑protected IP are consistent with infrastructure patterns observed in recent phishing campaigns. No public page title, SSL certificate details, or HTTP response codes are available in the current intelligence set, leaving the exact content and target brand of the phishing lure unconfirmed.
Defenders should treat the domain as malicious, enforce DNS‑level blocking, add the IP to network‑level deny lists, and monitor for any future resolution changes or additional classifications from threat‑intel feeds. Ongoing observation of the domain’s activity and periodic rescans with VirusTotal or similar services are recommended to capture any later payload delivery or detection updates.