dark-matter-market[.]com

Analysis of dark-matter-market.com indicates that the domain is actively being used for a generic phishing campaign. The site returned an HTTP 200 response at the time of observation, confirming that a web service is reachable. Infrastructure data shows the domain is served through Cloudflare, with the authoritative nameservers harvey.ns.cloudflare.com and rita.ns.cloudflare.com, suggesting the operator is leveraging Cloudflare's CDN and DDoS protection services. Registration details reveal the domain was registered via Web Commerce Communications Limited dba WebNic.cc, a registrar known to host a variety of legitimate and malicious sites.

Security telemetry shows that PhishDestroy has already blocked the domain, and it appears on one additional security blocklist, reinforcing the consensus that the domain is hostile. VirusTotal scans recorded five detections out of ninety‑one participating vendors, providing concrete evidence that multiple independent scanners have identified malicious behavior associated with the host. No further intelligence such as page title, SSL certificate details, or targeted brand information is presently available, leaving the exact phishing lure and victim profile undefined.

Defenders should add dark-matter-market.com to deny‑list rules across web proxies, firewalls, and endpoint protection platforms, and consider DNS‑based blocking for any of its associated Cloudflare name servers. Continuous monitoring of the domain’s DNS records and any future VirusTotal submissions is advised to capture changes in detection rates or additional malicious payloads. Organizations that rely on email or web filtering should ensure that their solutions reference the latest blocklists that include this domain to mitigate exposure to the ongoing phishing campaign.