darkmatter[.]to

PhishDestroy identifies darkmatter.to as a cryptocurrency investment scam posing as a legitimate trading platform. This domain was registered on July 16, 2025, and currently shows zero detections out of 95 VirusTotal scans, indicating it has evaded detection by major security vendors. The site operates from IP address 104.21.26.167 and uses a Google Trust Services SSL certificate to appear authentic.

This threat is an active cryptocurrency scam that specifically targets investors by promising unrealistic returns on digital asset investments. The operators use social engineering tactics such as fake testimonials and fabricated trading statistics to convince victims to deposit cryptocurrency into wallet addresses controlled by the threat actors. Once funds are transferred, victims receive no returns, and all communications with the site cease. The domain's recent registration date and clean VirusTotal score suggest this is a newly deployed campaign that hasn't yet been widely recognized by security systems.

If you visited darkmatter.to and entered any cryptocurrency wallet information or made a deposit, immediately transfer any remaining funds to a new wallet and revoke any connected permissions. Report the incident to your local cybercrime unit and file a complaint with your country's financial regulator. Consider using blockchain explorers to track your transaction and document all interaction details for potential law enforcement action. Never reuse passwords or wallet credentials across different platforms, as this could lead to further compromise.