dmarakit[.]com

PhishDestroy has identified the domain dmarakit.com as a brand impersonation threat specifically targeting the Celer brand. This domain was created on May 28, 2025, and its page title was simply 'Website Created,' indicating a minimal or placeholder setup typical of malicious domains. The domain is now offline, but its brief active period posed a risk to users who might have mistaken it for a legitimate Celer-related site.

Technical indicators for dmarakit.com are concerning. VirusTotal reports that 8 out of 95 security vendors flagged this domain as malicious. It was registered through Web Commerce Communications Limited dba WebNic.cc and resolves to IP address 185.149.120.225. The domain appears on one security blocklist and was found in one AlienVault OTX threat intelligence pulse. Its SSL certificate is of type R10, which is a publicly trusted certificate but does not guarantee legitimacy. The domain is not currently on Google Safe Browsing (GSB) blocklists, though it may have been missed during its active period.

As of now, dmarakit.com has been taken offline, which mitigates immediate risk. However, users should remain vigilant as similar domains may appear. PhishDestroy recommends that users verify any communications claiming to be from Celer and avoid clicking on links from unsolicited messages. If you have interacted with this domain, monitor your accounts for unusual activity and consider changing passwords. The combination of a recent creation date, low trust indicators, and a targeted brand impersonation makes this a credible threat that required swift action.