Check Any Dark Matter Link in 30 Seconds

People who lose funds to a fake Dark Matter site almost always typed their password into a page that looked perfect. A page is easy to copy; an onion address is not. Before you sign in through a link from anywhere, run these four checks in order:

  1. Where did the link come from?

    This page, or a bookmark you saved from it, is a known source. A link from a search ad, a Reddit or Telegram post, a "hidden wiki" list or a private message is unknown until it passes the next check.

  2. Compare the end, not the beginning.

    Every real Dark Matter link starts with darkmat — and so do most fakes, because free vanity-address tools find a key with a matching 7-character prefix within an hour on an ordinary computer. Compare the last six characters and a few in the middle: the real endings are …pcf3id, …yuy6ad and …pkafyd.

  3. Check the format.

    A v3 onion address is exactly 56 characters before .onion, uses only lowercase letters a–z and digits 2–7, and always ends in d. A string with 0, 1, 8, 9, capital letters or a different length is not an onion address at all.

  4. Paste it into the Link Checker.

    The Link Checker compares the full address against this list character by character. Use it even for links you copied yourself — clipboard-hijacking malware swaps onion and crypto addresses between copy and paste.

What an Exact Match Actually Proves

An onion address is not a name that points to a server, like a regular domain. It is the server's identity: the address encodes the site's public key, and Tor only connects you to a server that can prove it holds the matching private key.

darkmatgvwajlcq75r6dpighmbac77gd5nqgujxq3mrdavyl46pcf3id.onion
darkmat
The first 7 characters of the key. The operator generated keys until one started with a recognisable word — anyone can do the same, so the prefix proves nothing.
Key and checksum
The rest of the site's ed25519 public key plus a 2-byte checksum. This is the part no one can reproduce: a single wrong character gives a different site or an invalid address.
d
The version marker. Every v3 onion address ends in "d".

There is no DNS to hijack and no certificate authority to fool. On a clean device, if the address in your address bar matches one of the three links above character for character, you are talking to the real Dark Matter server. That is why every phishing site has to live at a different address — and why its whole strategy is getting that address in front of you.

How to Open the Link in Tor Browser

  1. Install Tor Browser.

    On a computer, download it only from torproject.org. On Android, install Tor Browser from Google Play or torproject.org; on iPhone and iPad, use Onion Browser, the iOS browser recommended by the Tor Project. If Tor is blocked where you are, enable a bridge (obfs4 or Snowflake) — see the Tor Browser setup guide.

  2. Copy one of the links.

    Use the Copy link button on any card marked Online, or click the address to select it in full.

  3. Paste it into the address bar and press Enter.

    Use the address bar, not the search box on the start page. Anything Tor Browser does not recognise as an address is sent to the search engine — and search results are exactly where fake links are planted.

  4. Give it 10–30 seconds.

    A connection to an onion site runs through six Tor relays, so the first load is slower than a regular website. Once connected, the address bar shows an onion icon instead of a padlock.

  5. Check the address bar on the sign-in page.

    The market opens on its Authorization page: username, password, a "Session expires in" selector and an "I am a human" check. Compare the address bar with the card you copied from before you type anything.

  6. Bookmark it.

    Press Ctrl+D (⌘+D on macOS) and open the market from that bookmark from now on, never from a search.

After Sign-In: Two More Checks

Your personal phrase in the 2FA message

When you register, the market asks for a personal phrase and notes that your two-factor message will contain it. With PGP two-factor login enabled, the challenge you decrypt at sign-in includes that phrase. A copied page cannot show it. A live proxy clone (see below) can relay it from the real market, so this check backs up the address check — it does not replace it. Setup is covered in the 2FA guide.

The market's own PGP key

The footer of the real market links to its PGP page. Save that public key on a visit you have verified by address. From then on you can check any link list or announcement signed with it yourself, without relying on this site or anyone else — the PGP guide shows how to verify a signature. For checks beyond the link (vendor keys, escrow behaviour), see Market Verification.

Link Not Opening? What Tor Browser's Error Means

When an onion site can't be reached, Tor Browser shows an error page with a code. The code tells you whether the problem is the address, the market or your own connection.

Code Tor Browser shows What it means What to do
0xF6 Invalid Onionsite Address The address is broken: a character was changed or cut off, so its built-in checksum fails. Copy the link again with the Copy link button. A link from elsewhere that gives this error was never valid.
0xF0 Onionsite Not Found Tor can't find the service on the network — the link is offline or has been retired. Use another link from this page and check the Status page.
0xF2 Onionsite Has Disconnected The service was found but stopped answering — typical during a restart or a DDoS attack. Try another link, or retry this one in a few minutes.
0xF3 Unable to Connect to Onionsite The service is overloaded or the Tor network is congested. Press Ctrl+Shift+L (New Tor circuit for this site) and reload.
0xF7 Onionsite Circuit Creation Timed Out The problem is on your side: Tor couldn't build a circuit in time, usually over a slow or filtered connection. Check your connection; if Tor is restricted in your country, connect through a bridge.
0xF1 Onionsite Cannot Be Reached The service published broken connection data — an error on the server side. Use another link and retry later.
0xF4 0xF5 Onionsite Requires Authentication / Authentication Failed The site demands a private access key. The Dark Matter links on this page are public and never ask for one. The address you opened is not one of the three above — compare it again.

If all three links are down

Three links on separate servers rarely fail at the same time. When all of them are unreachable for more than 30 minutes, the cause is almost always a DDoS attack or maintenance, not a closure. Check the per-link history on the Status page and wait for this page or the RSS feed to update. This is exactly when "new link" posts appear on forums and in Telegram channels — a genuinely new Dark Matter link is published here first.

How This Link List Is Maintained

  • Manual checksEach link is opened in Tor Browser and counts as online only when the market's sign-in page loads. Per-link results and the incident log are on the Status page.
  • DailyAll three links are re-checked at least once a day. "Last check" at the top of this page is the last time all three were confirmed.
  • On every changeThis page is updated first, followed by an entry in the RSS feed and in "Latest Updates" on the homepage.
  • Retired linksDeleted from the list, not archived — every link shown here is usable right now.

Why a Dark Matter link changes

Market operators add or replace onion addresses to spread load during DDoS attacks, after moving to new servers, or when a private key may have been exposed. A retired address simply stops answering — without its private key, nobody else can run a site at it. The real danger of old links is the lists that keep them: a directory showing a dead Dark Matter link next to a live fake gives you no way to tell the two apart.

There Is No Clearnet Dark Matter Link

Dark Matter Market exists only as a Tor onion service. There is no .com, .net, .to or other regular-domain version, and no "clearnet mirror". This website, darkmatter.market, is an information portal: it publishes the link list and guides, has no login and never asks for your market credentials. Any page on a regular domain that asks you to sign in to Dark Matter is phishing.

Saving the Link Safely

  • Bookmark all three links in Tor Browser, not just one — if a link goes offline, you won't need to search for an address.
  • On Tails, bookmarks are erased at shutdown unless you turn on the Tor Browser Bookmarks feature in Persistent Storage.
  • Keep links out of synced notes and messengers. Cloud notes and "Saved messages" store them on servers you don't control, tied to your account.
  • Re-check bookmarks against this page now and then, and delete any link that is no longer listed.

Dark Matter Link FAQ

Is darkmatter.market the Dark Matter Market website?

No. darkmatter.market is an information portal with the verified link list and guides. The market itself is reachable only through the .onion links on this page, in Tor Browser.

Which of the three links should I use?

Any link marked Online. All three lead to the same marketplace and the same account, and none is safer than the others. If one is slow, switch to another — you will only need to sign in again.

Why does every Dark Matter link start with "darkmat"?

It is a vanity prefix: the operators generated keys until one began with a recognisable word. Phishing sites generate the same prefix just as easily, so always compare the rest of the address, especially the ending.

Can I open the link in Chrome, Safari or Brave?

Chrome, Safari and regular Firefox cannot open .onion addresses at all, and a VPN does not change that. Brave's "Private window with Tor" can open them but lacks Tor Browser's anti-fingerprinting protections. Use Tor Browser.

Does the Dark Matter link work on a phone?

Yes. Use Tor Browser for Android, or Onion Browser on iPhone and iPad. The links are the same as on desktop.

The link has no https. Is that a problem?

No. Traffic to an onion site is encrypted end to end by Tor, and the address itself authenticates the server. Tor Browser shows an onion icon instead of a padlock on onion sites.

I found a different Dark Matter link on Reddit, Telegram or a link site. Is it real?

Only if it matches one of the three links on this page exactly. If it doesn't, treat it as phishing: don't sign in, and report it through the contact page.

How will I know when a link changes?

Subscribe to the RSS feed — every link change is posted there as soon as this page is updated. The "Last check" time at the top shows when the list was last confirmed.