abacusmarketcrypt[.]com

This domain, abacusmarketcrypt.com, is actively posing as a dark web cryptocurrency marketplace, targeting users seeking illicit financial or trading platforms. The site uses the page title 'Abacus Market: Dark Web Shop & Crypto Hub 2025,' which aligns with known phishing tactics designed to lure victims into disclosing sensitive credentials or transferring cryptocurrency under false pretenses. The infrastructure is hosted behind CloudFlare (IP 188.114.97.3), a common tactic to obscure the true origin of malicious content and evade detection by security systems. Analysis indicates the domain was registered on March 11, 2025, through PDR Ltd. d/b/a PublicDomainRegistry.com, a registrar frequently associated with newly created phishing sites. Despite its recent creation, the domain has already been flagged on one security blocklist, though it remains undetected by antivirus engines, with 0 out of 95 detections on VirusTotal. The SSL certificate is issued by Google Trust Services (WE1), providing a false sense of legitimacy to unsuspecting users. The domain’s active status and lack of widespread detection suggest it is operating in the early stages of a phishing campaign. Users who have visited abacusmarketcrypt.com or interacted with its content should immediately cease all engagement and assume their credentials or financial details may be compromised. It is recommended to revoke any active sessions, reset passwords for associated accounts, and monitor for unauthorized transactions. Devices used to access the site should undergo a full security scan to detect potential malware or backdoors. Organizations should update internal blocklists to include this domain and its associated IP (188.114.97.3) to prevent further exposure.