dmarketlink[.]com

This domain was registered on May 17, 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. It uses nameservers autumn.ns.cloudflare.com and wilson.ns.cloudflare.com and resolves to IP 104.21.62.146 in CA. The SSL certificate is issued by Google Trust Services under the WE1 profile. The domain returns HTTP status 200 and serves a page with the exact title Active Darknet Markets 2026 List [ Updated May ].

The domain appears on exactly one security blocklist and is blocked by PhishDestroy. It is referenced in one AlienVault OTX threat intelligence pulse and flagged by 1 out of 95 vendors on VirusTotal. Its Gridinsoft trust score is recorded as 1 out of 100. The threat classification is generic_phishing, the risk level is high, and the domain status remains active on the report date of July 12, 2026.

Infrastructure analysis reveals Cloudflare-hosted resolution paired with a page title that directly references darknet markets. This combination matches patterns observed in phishing attempts that lure visitors seeking illicit marketplace information. The single blocklist entry and single OTX pulse provide the only external corroboration currently available.

What remains uncertain is whether additional infrastructure or campaigns are linked to this registration beyond the documented indicators. No further ASN, brand, or kit details are supplied in the source data. Defenders should block the IP 104.21.62.146 and the domain itself at network perimeters, review proxy and DNS logs for connections to the listed nameservers, and cross-reference new registrations against the same registrar and nameserver pair.