nextepochmarket[.]com

PhishDestroy identifies nextepochmarket.com as an active phishing domain currently under investigation for generic phishing threats. The domain poses significant risks to end-users due to its recent creation and apparent attempts to evade detection. Currently unresolved by 95 VirusTotal engines, this domain demonstrates classic phishing behavior by leveraging newly registered domains with short lifespans to capture unsuspecting visitors. This domain was flagged with 2 out of 95 VirusTotal detections despite its active status, indicating either extremely recent deployment or highly sophisticated evasion techniques. It resolves to IP address 172.67.153.164 using a Let's Encrypt SSL certificate, suggesting an attempt to appear legitimate. Registered through Metaregistrar BV on March 28, 2026, the domain is newer than 24 hours old, which aligns with the typical lifespan of phishing infrastructure designed for quick deployment and takedown. The complete lack of detection suggests this may represent a zero-day phishing campaign actively testing new evasion methods. Organizations and end-users should immediately implement network-level blocks against nextepochmarket.com and its associated IP address 172.67.153.164. Given the domain's zero detection status and recent registration, this represents a high-priority threat requiring immediate containment. Users who may have interacted with this domain should run full malware scans, change any credentials potentially exposed during visits, and report the domain to their security teams and relevant abuse channels. Security researchers should monitor this domain for pattern development while maintaining heightened caution due to its current stealth capabilities.