abacusmarket[.]to

This domain is flagged as a high‑risk generic phishing site. The authoritative name servers jim.ns.cloudflare.com and paislee.ns.cloudflare.com resolve abacusmarket.to to the Cloudflare‑owned address 104.21.24.112, located in Canada. VirusTotal reports that three of ninety‑one scanned samples associated with the domain are flagged by security vendors, and the domain appears on one public blocklist. AlienVault OTX references the domain in two separate threat‑intel pulses, and PhishDestroy has listed it as blocked. The TLS certificate is issued by Google Trust Services under the WE1 organization, confirming HTTPS availability with a valid certificate chain. The page title returned by the HTTP 200 response is “Abacus Market Review 2026 | Secure Darknet Access”, but the page content has not been publicly analysed, so the exact phishing lure and credential‑capture mechanisms remain unknown. Registration details indicate the domain was registered through the Government of the Kingdom of Tonga, suggesting possible abuse of a legitimate registrar. Current intelligence does not reveal additional backend servers or email infrastructure. Defenders should add the domain and its resolving IP to outbound filtering rules, monitor DNS queries for the associated Cloudflare name servers, and consider sinkholing the IP address if feasible. Ongoing surveillance of related OTX pulses and blocklist updates is recommended to capture any expansion of the campaign.