darknetwiki[.]com

Analysis of darknetwiki.com indicates that the domain is actively engaged in a generic phishing campaign as of the report date, July 25, 2026. The domain is registered through Eranet International Limited and resolves to Cloudflare’s authoritative name servers (laila.ns.cloudflare.com and luke.ns.cloudflare.com), a common hosting choice for fast‑flux and abuse‑resilient infrastructure. An HTTP request to the site returns a 200 OK status, confirming that the web service is reachable and serving content.

VirusTotal records show that four of ninety‑one security vendors have flagged the domain, providing a modest but notable detection signal. The domain is presently listed on a single external security blocklist and has been explicitly blocked by the PhishDestroy mitigation platform, reinforcing the consensus that it poses a phishing threat. No additional intelligence such as IP address, SSL certificate details, page title, or brand targeting is available in the current dataset, leaving the exact payload and victim‑interaction mechanisms uncharacterized.

Defenders should prioritize the inclusion of darknetwiki.com on network‑level deny lists, enforce DNS‑based blocking, and consider sinkholing the associated Cloudflare name servers if feasible. Ongoing monitoring of VirusTotal submissions, blocklist updates, and any emerging forensic artifacts is advised to refine detection signatures and to capture potential shifts in hosting or campaign tactics.