# tor-marktplace.net — SUSPICIOUS

> PhishDestroy identifies tor-marktplace.net as an active crypto drainer phishing site with 0/95 VirusTotal detections.

## Summary
PhishDestroy identifies tor-marktplace.net as an active cryptocurrency drainer phishing campaign under investigation. The domain mimics legitimate darknet marketplaces to deceive users into connecting crypto wallets and approving malicious token approvals, resulting in fund theft. This is a high-risk threat due to the irreversible nature of cryptocurrency transactions and the active state of the campaign.  This domain was flagged with 0 detections out of 95 on VirusTotal, indicating it remains undetected by most antivirus engines as of the latest scan. The domain resolves to IP address 188.114.96.3 and was registered through NICENIC INTERNATIONAL GROUP CO., LIMITED on March 13, 2026. The SSL certificate was issued by Let's Encrypt, which does not inherently indicate legitimacy. The domain has not been listed on major blocklists at the time of investigation, and trust scores are pending further analysis. The combination of a newly registered domain, low detection rate, and association with cryptocurrency theft suggests a rapidly evolving threat.  Mitigation for this crypto drainer threat requires immediate action. Users should avoid interacting with tor-marktplace.net or any linked pages, especially those prompting wallet connections or token approvals. Verify the legitimacy of any darknet marketplace by cross-referencing official URLs and community feedback. Use hardware wallets or separate dedicated wallets with minimal funds for interactions. Enable transaction alerts and monitor wallet approvals for suspicious token contracts. Report any interactions with this domain to relevant cybersecurity authorities and cryptocurrency platforms to aid in takedown efforts and prevent further victimization.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-13 10:16:28
- Registrar: NICENIC INTERNATIONAL GROUP CO., LIMITED
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/86d34609-66ea-4591-bba9-0cbd9eb43f70
- PhishDestroy: https://phishdestroy.io/domain/tor-marktplace.net/
- LLM endpoint: https://phishdestroy.io/domain/tor-marktplace.net/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/tor-marktplace.net/
Last updated: 2026-03-24