Skip to content
Fake Dark Web Search Engine Directs Users to 255 Scam Sites

Fake Dark Web Search Engine Directs Users to 255 Scam Sites

First seen 11 Nov 2026, 23:43 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 11, 2026 at 23:44 UTC
  • •A fake dark web search engine has directed users to 255 fraudulent sites.
  • •The scam sites impersonate popular dark web services to steal credentials and bitcoins.
  • •Juha Nurmi discovered the clone and confirmed its existence using a comparison script.

A fake version of the Ahmia dark web search engine has been discovered, leading users to 255 fraudulent sites designed to steal login credentials and bitcoins. Juha Nurmi, the founder of Ahmia, identified the clone and its associated scam sites, which include imitations of popular dark web services like Agora and Abraxas. The malicious sites function as proxies, misleading users into thinking they are accessing legitimate services. Nurmi utilized a script to compare his legitimate site with the fake one, confirming the extent of the deception. This incident highlights the ongoing issue of fake sites in the dark web ecosystem, which complicates navigation and increases the risk of credential theft.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 13h ago How this analysis works

Timeline

2026-11-11
Discovery of fake Ahmia search engine
Juha Nurmi reported the existence of a clone of his Ahmia search engine, leading to 255 scam sites.
Vice

More articles in this cluster (2)

Extracted Entities (7)

1 / 3

Common questions

How can I identify fake dark web sites?
Look for inconsistencies in URLs, check for known legitimate services, and use trusted search engines like Ahmia.
What should users do if they visited a scam site?
Users should change their passwords immediately and monitor their accounts for unauthorized transactions.
Is there a way to report these fake sites?
Yes, users can report suspicious sites to cybersecurity forums or organizations that track dark web activities.