dmarket[.]com-marketplace-login[.]rclfoodsltd[.]com

This domain presents an elevated risk as a confirmed brand impersonation threat, specifically designed to mimic the login interface of DMarket, a popular digital marketplace. The site attempts to deceive users into believing they are accessing a legitimate DMarket login page, likely to harvest credentials or other sensitive information. PhishDestroy has analyzed this domain and found it to be a sophisticated phishing attempt that exploits user trust in the DMarket brand.

The technical indicators paint a clear picture of malicious intent. VirusTotal flags this domain with 5 out of 95 security vendors detecting it as malicious, a significant signal of its dangerous nature. The domain was created on February 21, 2026, a very recent date that aligns with typical phishing domain registration patterns. It resolves to IP address 94.159.113.209 and uses an SSL certificate from R10, which provides a false sense of security. The page title, 'Advancemedicalcostarica – Your Source for the Best Mobile Games,' is deliberately misleading and unrelated to DMarket, further indicating deception. The domain appears on one security blocklist and is currently offline, likely taken down after detection.

Users who may have encountered this site should take immediate action. Since the threat is brand impersonation targeting DMarket, anyone who entered login credentials should change their DMarket password immediately and enable two-factor authentication if not already active. It is also advisable to scan the device for any malware that may have been downloaded. PhishDestroy recommends avoiding any interaction with similar suspicious domains and always verifying URLs by typing them directly into the browser. If you suspect your credentials were compromised, contact DMarket support and monitor accounts for unauthorized activity.