Real-time verification status for active darknet marketplaces. Forensic-grade address validation. Research-only intelligence feed for journalists, academics, and security analysts.
darkmafmzgnsmow5z3spgludhpwxhwbg77oam433fjx3clzh2yp2oaid.onion
drughuj7l72ig56pza77eriu7yh6qsao4xb4yasq2qfjusxzuq6rlwqd.onion
blackoogcnxogvymmebfwfjhx4k7efpgeoeytxtsev2lc4pqlbz54qad.onion
omega7yhz7n4vg4yhf2na2qaaaeatdlqvjbj2juc245mr5muxtnuvgyd.onion
Established multi-vendor market with hybrid escrow and PGP-signed feedback.
torzon7aphar3x4l5b77nsylgyw26kntbi4m2wemrjh72aczeh27f6qd.onion
Darknet marketplace with vendor verification and escrow.
vck75uosucwzxgyp6yofroujgtasyuubkem7jh65r5ha5fmb6ztv6qqd.onion
DarkMatter is a major marketplace specializing in cannabis and psychoactive substances, known for reliable supply control and an escrow system.
darkmafmzgnsmow5z3spgludhpwxhwbg77oam433fjx3clzh2yp2oaid.onion
BlackOps is a darknet marketplace with escrow protection, PGP-encrypted messaging and multi-signature transactions, supporting Bitcoin and Monero across multiple vendor categories.
blackoogcnxogvymmebfwfjhx4k7efpgeoeytxtsev2lc4pqlbz54qad.onion
Multi-vendor darknet market with escrow and PGP-verified vendor listings.
bar47kfsex6pvvs3iujqeo4fsnxxn67k7usc5jnbdnoozt3gnp4br7yd.onion
DrugHub is a major darknet marketplace operating since 2021 that specializes in narcotics and accepts BTC/XMR payments.
drughuj7l72ig56pza77eriu7yh6qsao4xb4yasq2qfjusxzuq6rlwqd.onion
Omega Market is an established multi-vendor marketplace with multisig escrow, PGP-verified vendors, and 24/7 dispute resolution.
omega7yhz7n4vg4yhf2na2qaaaeatdlqvjbj2juc245mr5muxtnuvgyd.onion
The story of Monero on darknet markets is no longer a niche technical footnote; it is the defining structural shift of the post-2023 ecosystem. While Bitcoin remains the historical currency...
READ FULL BRIEFING →The death of Abacus Market in mid-2025 wasn’t a seizure, a hack, or a server failure. It was a decision made by the people holding the keys. Reconstructing the collapse...
For years, the common narrative around darknet market takedowns was one of technical wizardry – the FBI cracking Tor, or Europol deploying some mythical zero-day exploit to deanonymize entire user...
When law enforcement seizes a darknet market’s backend server, the press release usually leads with the arrest and the volume of cryptocurrency seized. What rarely makes the headlines is the...
The numbers hit you when you actually read the TRM Labs data side by side....
> READ MOREThe last mile decides who is still standing. Onion sites get seized, escrow gets drained,...
> READ MOREThe phrase “burner identity” makes purchased accounts, SIMs, and mailboxes sound disposable and clean. They...
> READ MOREAnalyzing darknet marketplace deposit structures usually starts with a simple question: who holds the private...
> READ MORE"Documenting the undocumented with forensic precision."
NULLSEC is operated by a collective of independent security researchers, investigative journalists, and academic professionals specializing in cybercrime ecosystems and darknet economics. Our team includes former threat intelligence analysts from major security firms and contributors to peer-reviewed publications on underground marketplaces.
Every listed address undergoes multi-source verification: PGP signature validation against known administrator keys, cross-referencing with official forum announcements on Dread, historical address chain analysis, and automated uptime monitoring. Addresses without verifiable cryptographic provenance are marked as unverified or excluded entirely.
Unlike link aggregators that scrape and republish unverified addresses, NULLSEC operates with editorial oversight. We do not monetize traffic, run affiliate schemes, or accept payment for listings. Our status indicators reflect real-time automated checks, not cached data. When markets exit-scam or are seized, we document it immediately with forensic analysis.
This resource serves journalists covering darknet markets, academic researchers studying underground economies, law enforcement analysts, cybersecurity professionals conducting threat intelligence, and harm reduction organizations. We do not facilitate transactions and explicitly discourage illegal activity.
Access .onion addresses exclusively through official Tor Browser. Never use web proxies, VPN-over-Tor, or Tor-over-VPN configurations. Download from torproject.org only.
Set Tor Browser security level to SAFEST. This disables JavaScript, WebGL, and other fingerprinting vectors. Legitimate markets function without JS enabled.
Always verify .onion addresses against PGP-signed canary statements. Phishing sites replicate interfaces exactly. One character difference means complete compromise.
Encrypt all communications with vendor PGP keys. Verify key fingerprints through multiple channels. Never transmit plaintext addresses or credentials.
Bitcoin is transparent and traceable. Monero provides ring signatures, stealth addresses, and RingCT by default. Use XMR-only markets when possible. Avoid exchanges requiring KYC.
Copy verified .onion addresses directly to Tor Browser. Always verify PGP signatures before proceeding. Practice operational security at all times.
This directory is provided for research, journalism, and educational purposes only. Tor Research — Darknet Markets Intelligence does not facilitate, encourage, or condone illegal activity.