dark[.]pe

PhishDestroy has identified dark.pe as a generic phishing domain, impersonating darknet market links to deceive users seeking illicit online marketplaces. The domain, titled "Darknet Market Links 2026 - DARK.PE," was registered on May 19, 2026, through EPAG Domainservices GmbH. Although no specific brand or drainer kit was detected, the site's purpose aligns with credential harvesting or malware distribution targeting individuals interested in darknet markets.

Technical indicators for dark.pe include a VirusTotal detection ratio of 1 out of 95 security vendors flagging the domain as malicious, indicating low but notable risk. The domain resolves to IP address 172.67.174.181 and is protected by an SSL certificate issued by Google Trust Services (WE1). It appears on one security blocklist, and Google Safe Browsing status was not explicitly provided, but the domain was taken offline. The registrar, EPAG Domainservices GmbH, is a legitimate provider, but the domain's creation date and behavior suggest malicious intent.

As of the latest analysis, dark.pe is offline, having been taken down likely due to abuse reports or automated detection. PhishDestroy recommends that users avoid interacting with any remaining links or variations of this domain. Remaining risk includes potential copycat domains or redirections. Organizations should block the IP 172.67.174.181 and monitor for similar registrations. Users are advised to only access darknet markets through verified, official channels and to never provide personal information to unverified sites.