link-fo[.]icu

This domain, link-fo.icu, is currently active and classified as a high-risk phishing site targeting users of darknet marketplaces. Analysis indicates the page title explicitly references 'MATANGA LIFE guide' and provides a tutorial for accessing darknet markets, suggesting an attempt to deceive users seeking illicit platforms. The domain remains operational as of this report, with no confirmed takedown or sinkholing observed. Infrastructure analysis reveals the domain was registered on June 19, 2026, through NICENIC INTERNATIONAL GROUP CO., LIMITED. It resolves to the IP address 188.114.96.3 and utilizes an SSL certificate issued by Google Trust Services, which may lend a false sense of legitimacy. VirusTotal detections show 2 of 95 security vendors flagging the domain as malicious, indicating limited but present awareness within threat intelligence communities. No additional blocklist entries or historical abuse reports were identified in public repositories at the time of this assessment. The domain poses a significant risk to users unfamiliar with darknet market operations, as it likely harvests credentials or distributes malware under the guise of instructional content. Organizations should implement DNS-based blocking for 188.114.96.3 and the domain itself, while endpoint protection systems should be updated to detect and prevent access. Users encountering this domain are advised to avoid interaction, clear browser caches, and verify any claimed darknet market links through trusted, verified sources. Continuous monitoring of related infrastructure is recommended due to the domain's persistent active status.