x.wtn-market[.]cc
Category: Phishing And Fraud
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of x.wtn-market[.]cc
The domain x.wtn-market[.]cc appears to present itself as an access portal for “Wethenorth Market,” advertising official onion links, mirror URLs, and Tor connection information. Based on the page title, metadata, and visible homepage content, the site’s purpose appears to be directing visitors to darknet marketplace entry points rather than offering mainstream informational or commercial services.
The operator is not clearly identified on the page, and the site does not appear to provide transparent business or organizational details. Its branding, dark-themed layout, and emphasis on “verified” onion links suggest it may be intended as a gateway or mirror directory for users seeking access to a hidden-service marketplace. This type of content is commonly associated with anonymity-focused services and may carry elevated trust and authenticity concerns.
Safety Assessment for x.wtn-market[.]cc
This domain shows several notable risk indicators at the time of this scan. It was flagged by 9 out of 92 security engines, with multiple detections describing the site as phishing-related or otherwise malicious. In addition, available web-classification data labels it as phishing/fraud or suspicious content. While blacklist databases checked here did not list the domain at the time of review, multi-engine detection consensus is a stronger warning signal than a single heuristic alert.
The page content itself may also raise concern because it promotes “official” darknet access links and mirror addresses without providing verifiable operator identity or independent trust signals. Sites that claim to provide verified access to hidden services can be used to redirect users to impersonation pages, credential theft portals, or other fraudulent destinations. The domain is also relatively new and not ranked among widely visited sites, which may further increase uncertainty.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was reachable over HTTPS with a valid TLS certificate issued by a mainstream certificate authority, and it appears to be served through Cloudflare infrastructure on IP address 104.21.53.13. The nameservers also point to Cloudflare, suggesting the domain uses a reverse-proxy/CDN setup that can obscure origin hosting details. DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from that additional integrity layer.
The malware scan summary reported no flagged files, no flagged external links, and no flagged iframes at the time of analysis. However, that clean file-level result should be weighed against the stronger network-reputation signals: multiple security engines flagged the domain, and the site’s function as a mirror/onion-link hub may create elevated abuse potential even when page code appears minimal or clean.
Share your experience with this website. Was it safe? Did you encounter any issues?