oniontaxi[.]com

This domain, oniontaxi.com, is currently under investigation for generic phishing activity targeting users seeking darknet market links. Registered on May 11, 2026, through Eranet International Limited, the site resolves to IP 172.67.207.21, hosted on Cloudflare infrastructure in Canada. The page title, 'Darknet Market Links - Onion Taxi Status Monitor,' suggests it claims to provide access to or status updates for darknet markets, a common lure for phishing or credential harvesting schemes. Analysis indicates the domain is actively resolving with an HTTP 200 status and is protected by Cloudflare nameservers (igor.ns.cloudflare.com, nicole.ns.cloudflare.com) and a Google Trust Services SSL certificate. While the domain is flagged on one security blocklist and has low trust scores (46/100 from Scamadviser, 45/100 from Gridinsoft), no detections were reported by the 92 vendors that scanned it on VirusTotal. The absence of detections does not confirm safety, particularly given the domain's recent registration and association with high-risk content. Defenders should treat this domain as suspicious due to its thematic focus, low trust scores, and active status despite limited blocklist coverage. Monitoring for changes in detection status, SSL certificate updates, or shifts in hosting infrastructure is recommended. If the domain is encountered in network logs or user reports, it should be blocked or flagged for further review, particularly in environments where darknet-related activity is prohibited or high-risk.