Is darkmatter-darknetmarket.shop safe?
http://darkmatter-darknetmarket.shop/
Coveragestrong3 of 4 applicable core capabilities
Dark Matter Darknet Market is a phishing front that impersonates a dark-web marketplace to harvest credentials and crypto details.
This domain presents itself as a darknet marketplace with vendor guidelines, Monero transactions and PGP security, but independent security research identifies it as a phishing domain impersonating a dark web market to steal credentials, and antivirus engines flag it as malicious. The site is only 353 days old, discloses no operator, and offers no contact email. The combination of a credential-harvesting purpose with a fabricated marketplace facade places it in the Dangerous band.
Be the first to review darkmatter-darknetmarket.shop
Lost money to darkmatter-darknetmarket.shop? Warn others
Loading saved screenshot
Preparing the saved page preview.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
This domain presents itself as a darknet marketplace with vendor guidelines, Monero transactions and PGP security, but independent security research identifies it as a phishing domain impersonating a dark web market to steal credentials, and antivirus engines flag it as malicious. The site is only 353 days old, discloses no operator, and offers no contact email. The combination of a credential-harvesting purpose with a fabricated marketplace facade places it in the Dangerous band.
A fake marketplace built to capture credentials
External security research states that this domain impersonates a dark web market to steal credentials and advises visitors to avoid entering personal data. That is a direct phishing finding, not a generic category label.
Independent antivirus engines, including BitDefender and G-Data, have reported the domain as malicious or phishing. The detection is real but comes from a saved observation, so its timing should be confirmed.
The page itself mimics a darknet marketplace, claiming an initial launch on July 28th 2022, approximately 20,000 users, over 14,000 listings, 785+ verified vendors, Monero as the transaction currency, and a 2 XMR seller guarantee. These claims are the lure that makes the credential-harvesting front look like a functioning market.
Clean transport does not make the operator trustworthy
The saved TLS check found a valid encrypted connection and the browser threat feed returned no threat warning. Those are transport and blocklist observations only; they do not establish that the operator is honest or that the site is safe to use.
The registrable domain is 353 days old, and no direct contact email was found on the captured page. The operator is not disclosed, and the site provides no verifiable business identity behind the marketplace claims.
The page also describes multi-tiered security with compulsory dual-factor verification via PGP-encrypted messaging and a walletless structure with multisignature transactions and automated escrow. These are the same trust-building claims a phishing page uses to persuade visitors to enter credentials or wallet details.
Why the score is 12
One public warning on a scam-warning or security site: "This domain www.darkmatter-darknetmarket.shop impersonates a dark web market to steal credentials. Resolves to IP 45.147.197.100. Avoid entering personal data.". Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
5/ 91
detectionsSaved analysis from September 24, 2026 - stale
5 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 2
- Suspicious
- 3
- Total
- 91
| Engine | Finding |
|---|---|
| BitDefenderMalicious | phishing |
| G-DataMalicious | phishing |
| alphaMountain.aiSuspicious | suspicious |
| ESETSuspicious | suspicious |
| GridinsoftSuspicious | suspicious |
All 91 engine results
- BitDefender - phishing - Malicious
- G-Data - phishing - Malicious
- alphaMountain.ai - Suspicious
- ESET - Suspicious
- Gridinsoft - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Clean
- CINS Army - Clean
- CRDF - Clean
- Criminal IP - Unrated
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESTsecurity - Clean
- Forcepoint ThreatSeeker - Unrated
- Fortinet - Clean
- Fortra - Unrated
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- Netcraft - Unrated
- OpenPhish - Clean
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
DARKMATTER MARKET ANALYSIS PLATFORM STATUS ACTIVE OPERATIONS INITIAL LAUNCH JULY 28TH 2022 PARTICIPANT COUNT APPROXIMATELY 20K USERS AVAILABLE PRODUCTS EXCEEDS 14K LISTINGS AUTHORIZED SELLERS 785+ VERIFIED VENDORS TRANSACTION CURRENCY MONERO CRYPTOCURRENCY SELLER GUARANTEE 2 XMR SECURITY DEPOSIT
What the captured page showed
1 observation- 01
DARKMATTER MARKET ANALYSIS PLATFORM STATUS ACTIVE OPERATIONS INITIAL LAUNCH JULY 28TH 2022 PARTICIPANT COUNT APPROXIMATELY 20K USERS AVAILABLE PRODUCTS EXCEEDS 14K LISTINGS AUTHORIZED SELLERS 785+ VERIFIED VENDORS TRANSACTION CURRENCY MONERO CRYPTOCURRENCY SELLER GUARANTEE 2 XMR SECURITY DEPOSIT
03 · Investigation Story
Investigation story
What the site claims
Dark Matter Darknet Marketplace - Vendor Guidelines | Official
What we observed
The page content was captured and checked alongside 59 antivirus results.
What independent research found
1 external finding was saved and compared with the page evidence.
What remains unverified
1 of the 4 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Phishing & Impersonation
Service and business model
Unknown
Observed behavior
Evidence behind this classification
- 01One public warning on a scam-warning or security site: "This domain www.darkmatter-darknetmarket.shop impersonates a dark web market to steal credentials. Resolves to IP 45.147.197.100. Avoid entering personal data."
- 021 independent antivirus family reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
- 03No direct contact email was found on the captured page, and the operator is not disclosed.
What this means for you
What happens if a visitor acts on the page
A visitor who treats the page as a real marketplace and enters login credentials or cryptocurrency information is exposed to credential theft, because the domain is identified as a phishing site designed to steal credentials and crypto details.
How the observed mechanism works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
The page's own claims of Monero transactions, vendor deposits and PGP-secured accounts are the mechanism that encourages that entry; the marketplace infrastructure those claims describe is not present.
Do not enter any credentials, wallet information or personal data on this site. Treat it as a phishing domain, leave immediately, and if you have already entered a password or seed phrase, change that password and move any funds to a new wallet.
Web research findings
Independent findings for darkmatter-darknetmarket.shop, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
- PhishDestroyopen
"This domain www.darkmatter-darknetmarket.shop impersonates a dark web market to steal credentials. Resolves to IP 45.147.197.100. Avoid entering personal data."
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domaindarkmatter-darknetmarket.shop
- Redirects todarkmatter-darknetmarket.shop
- Hosted byPodaon SIA
Domain Timeline
- Nov 3, 2025Domain registered
First appeared in WHOIS records — 11 months old when this review was saved.
- Oct 22, 2026Saved security review — Rated Dangerous
The completed checks from this saved scan are detailed above.
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- No direct contact email found on the captured page.
Domain & Encryption
Redirect Chain
- 1301http://darkmatter-darknetmarket.shop/
- 2200https://darkmatter-darknetmarket.shop/
Server Reputation
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
The page presents marketplace statistics, Monero currency, vendor guarantees and PGP security claims that mimic a real darknet market but lack functional infrastructure. · 1 independent antivirus family reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
One public warning on a scam-warning or security site: "This domain www.darkmatter-darknetmarket.shop impersonates a dark web market to steal credentials. Resolves to IP 45.147.197.100. Avoid entering personal data."
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 5 of 91 engines flagged | Limited | Adverse | stale fallback · analysed Sep 24, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 22, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 22, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 22, 2026 |
| Independent research | 1 independent finding was saved | Completed | Adverse | this scan · Oct 22, 2026 |
- Antivirus
- Result5 of 91 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · analysed Sep 24, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 22, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 22, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 22, 2026
- Independent research
- Result1 independent finding was saved
- CompletionCompleted
- FindingAdverse
- Freshnessthis scan · Oct 22, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is darkmatter-darknetmarket.shop a scam or a legit website?
Is darkmatter-darknetmarket.shop safe to use?
I already paid or entered my details on darkmatter-darknetmarket.shop — what should I do?
Can I get my money back from darkmatter-darknetmarket.shop?
Did darkmatter-darknetmarket.shop steal my password or personal information?
How do I report darkmatter-darknetmarket.shop?
darkmatter-darknetmarket.shop looks professional — how can it still be a scam?
Has darkmatter-darknetmarket.shop been flagged by antivirus engines?
Is darkmatter-darknetmarket.shop on any phishing or malware blacklists?
How old is the darkmatter-darknetmarket.shop domain?
Where is darkmatter-darknetmarket.shop hosted?
How often is the darkmatter-darknetmarket.shop report updated?
08 · Final Verdict
Final verdict
Dark Matter Darknet Market is a phishing front that impersonates a dark-web marketplace to harvest credentials and crypto details.
This domain presents itself as a darknet marketplace with vendor guidelines, Monero transactions and PGP security, but independent security research identifies it as a phishing domain impersonating a dark web market to steal credentials, and antivirus engines flag it as malicious. The site is only 353 days old, discloses no operator, and offers no contact email. The combination of a credential-harvesting purpose with a fabricated marketplace facade places it in the Dangerous band.
09 · Community