market-darknet[.]org

PhishDestroy identifies market-darknet.org as an active darknet market phishing site designed to steal login credentials and payment details from unsuspecting users seeking access to illegal marketplaces. The domain mimics legitimate darknet market portals to trick visitors into entering sensitive information, which is then harvested by threat actors for fraud or resale on underground forums. This site poses a direct financial and identity theft risk to anyone who interacts with it.

This domain was flagged by 13 out of 95 VirusTotal security vendors, registered on January 20, 2025, through NameSilo, LLC, and resolves to IP 172.67.129.134. The presence of a Google Trust Services SSL certificate does not validate the site’s legitimacy—malicious actors frequently abuse trusted issuers to lend false credibility to phishing pages. The combination of a recently registered domain, low detection rate at initial exposure, and hosting on a reputable IP space highlights the stealthy nature of this operation.

If you visited market-darknet.org, immediately cease any interaction and avoid entering personal or payment details. Run a full antivirus scan on your device to detect potential malware. Monitor your financial accounts and credit reports for unauthorized transactions or identity theft. Report the domain to your browser vendor or security provider to help block future access. For further protection, consider using a dedicated identity theft protection service and enabling multi-factor authentication on all critical accounts.