gravemarket[.]io

The domain gravemarket.io is currently classified as an active generic phishing infrastructure and is under investigation as of August 04, 2026. Intelligence sources indicate that the domain appears on a single security blocklist and has been explicitly blocked by the PhishDestroy feed, confirming that at least one reputable anti‑phishing service has taken remediation action. VirusTotal records show that the domain was submitted for analysis and scanned by 91 independent scanning engines; none of the engines reported a detection at the time of the scan.

While the absence of detections does not constitute evidence of benign intent, it does demonstrate that the domain has not yet triggered automated signatures in the examined vendor set. No additional telemetry such as registrar details, ASN, hosting IP, SSL certificate information, HTTP response codes, or page title has been disclosed in the available data set, leaving the broader infrastructure characteristics unknown.

Defenders are advised to proactively block gravemarket.io at the network perimeter, incorporate the domain into endpoint and DNS threat‑intel feeds, and continue to monitor for any emerging indicators of compromise. Ongoing correlation with emerging blocklists and sandbox analyses should be performed to detect potential payload delivery or credential harvesting activity associated with this domain.