Real-time verification status for active darknet marketplaces. Forensic-grade address validation. Research-only intelligence feed for journalists, academics, and security analysts.
drughuj7l72ig56pza77eriu7yh6qsao4xb4yasq2qfjusxzuq6rlwqd.onion
torzon7aphar3x4l5b77nsylgyw26kntbi4m2wemrjh72aczeh27f6qd.onion
nexusbem4wmo67jt723niftkejivtgxbsbxkb6aesj5gyzj7b3v3mxid.onion
darkmafmzgnsmow5z3spgludhpwxhwbg77oam433fjx3clzh2yp2oaid.onion
Established multi-vendor market with PGP-signed feedback and dual escrow.
nexusbem4wmo67jt723niftkejivtgxbsbxkb6aesj5gyzj7b3v3mxid.onion
Established multi-vendor market with hybrid escrow and PGP-signed feedback.
torzon7aphar3x4l5b77nsylgyw26kntbi4m2wemrjh72aczeh27f6qd.onion
DarkMatter is a major marketplace specializing in cannabis and psychoactive substances, known for reliable supply control and an escrow system.
darkmafmzgnsmow5z3spgludhpwxhwbg77oam433fjx3clzh2yp2oaid.onion
BlackOps is a darknet marketplace with escrow protection, PGP-encrypted messaging and multi-signature transactions, supporting Bitcoin and Monero across multiple vendor categories.
blackoogcnxogvymmebfwfjhx4k7efpgeoeytxtsev2lc4pqlbz54qad.onion
DrugHub is a major darknet marketplace operating since 2021 that specializes in narcotics and accepts BTC/XMR payments.
drughuj7l72ig56pza77eriu7yh6qsao4xb4yasq2qfjusxzuq6rlwqd.onion
Omega Market is an established multi-vendor marketplace with multisig escrow, PGP-verified vendors, and 24/7 dispute resolution.
omega7yhz7n4vg4yhf2na2qaaaeatdlqvjbj2juc245mr5muxtnuvgyd.onion
For anyone who has spent time tracking onion services, the same ritual plays out every time: a new market appears, claims are made, and researchers are left staring at a...
READ FULL BRIEFING →The rhythm of the darknet economy is not set by steady-state supply and demand curves. It is dictated by shocks—specifically, the shock of a law enforcement takedown or the shock...
If you’ve spent any time researching darknet markets, you’ve likely seen the acronym “TTL” or references to “uptime” scattered across forum threads and vendor reviews. To the uninitiated, this looks...
Typosquatting is a lazy criminal’s game on the surface web. A misspelled brand name and a parked domain are enough to catch the careless. But on the Tor network, the...
Ask a random person what happens to Bitcoin seized by the government, and they will...
> READ MOREWhen law enforcement seizes a darknet market’s backend server, the press release usually leads with...
> READ MOREAsk anyone who has spent serious time on darknet markets what the single most fragile...
> READ MORETyposquatting is a lazy criminal’s game on the surface web. A misspelled brand name and...
> READ MORE"Documenting the undocumented with forensic precision."
NULLSEC is operated by a collective of independent security researchers, investigative journalists, and academic professionals specializing in cybercrime ecosystems and darknet economics. Our team includes former threat intelligence analysts from major security firms and contributors to peer-reviewed publications on underground marketplaces.
Every listed address undergoes multi-source verification: PGP signature validation against known administrator keys, cross-referencing with official forum announcements on Dread, historical address chain analysis, and automated uptime monitoring. Addresses without verifiable cryptographic provenance are marked as unverified or excluded entirely.
Unlike link aggregators that scrape and republish unverified addresses, NULLSEC operates with editorial oversight. We do not monetize traffic, run affiliate schemes, or accept payment for listings. Our status indicators reflect real-time automated checks, not cached data. When markets exit-scam or are seized, we document it immediately with forensic analysis.
This resource serves journalists covering darknet markets, academic researchers studying underground economies, law enforcement analysts, cybersecurity professionals conducting threat intelligence, and harm reduction organizations. We do not facilitate transactions and explicitly discourage illegal activity.
Access .onion addresses exclusively through official Tor Browser. Never use web proxies, VPN-over-Tor, or Tor-over-VPN configurations. Download from torproject.org only.
Set Tor Browser security level to SAFEST. This disables JavaScript, WebGL, and other fingerprinting vectors. Legitimate markets function without JS enabled.
Always verify .onion addresses against PGP-signed canary statements. Phishing sites replicate interfaces exactly. One character difference means complete compromise.
Encrypt all communications with vendor PGP keys. Verify key fingerprints through multiple channels. Never transmit plaintext addresses or credentials.
Bitcoin is transparent and traceable. Monero provides ring signatures, stealth addresses, and RingCT by default. Use XMR-only markets when possible. Avoid exchanges requiring KYC.
Copy verified .onion addresses directly to Tor Browser. Always verify PGP signatures before proceeding. Practice operational security at all times.
This directory is provided for research, journalism, and educational purposes only. Tor Research — Darknet Markets Intelligence does not facilitate, encourage, or condone illegal activity.