vortexdnm[.]info

Vortexdnm.info is a generic phishing domain that masquerades as the official portal for Vortex Market 2026, a darknet marketplace. The site's title, 'Vortex Market 2026 | Official Onion Links & Secure Access,' is designed to trick users into believing they are accessing a legitimate service, but in reality, the domain is a phishing front used to harvest credentials or distribute malware. No specific brand or drainer kit was identified in the available intelligence, but the impersonation of a well-known darknet market indicates a targeted attack against users seeking anonymity and illicit services.

Technical indicators underscore the threat's credibility. VirusTotal data shows 2 out of 95 security vendors flag the domain as malicious, a moderate detection rate that suggests it may evade some scanners. The domain resolves to IP address 176.123.0.55 and is registered through NiceNIC International Group Co., Limited, a registrar often associated with questionable domains. Created on February 21, 2026, the domain was active for a very short period before being taken offline. It appears on at least one security blocklist, and its SSL certificate is issued by Let's Encrypt (R12), a free certificate authority commonly abused by phishing sites.

As of the latest check, Vortexdnm.info is offline and no longer accessible. Authorities or hosting providers have presumably taken it down after the phishing campaign was detected. However, users who may have visited the site before takedown should monitor their accounts for unauthorized access and change any passwords entered on the page. The remaining risk is low given the domain's offline status, but similar phishing sites using variations of 'Vortex Market' may appear, so vigilance is advised. PhishDestroy recommends avoiding any unsolicited links to darknet markets and verifying URLs through official channels.