Real-time verification status for active darknet marketplaces. Forensic-grade address validation. Research-only intelligence feed for journalists, academics, and security analysts.
bar47kfsex6pvvs3iujqeo4fsnxxn67k7usc5jnbdnoozt3gnp4br7yd.onion
omega7yhz7n4vg4yhf2na2qaaaeatdlqvjbj2juc245mr5muxtnuvgyd.onion
drughuj7l72ig56pza77eriu7yh6qsao4xb4yasq2qfjusxzuq6rlwqd.onion
darkmafmzgnsmow5z3spgludhpwxhwbg77oam433fjx3clzh2yp2oaid.onion
Established multi-vendor market with hybrid escrow and PGP-signed feedback.
torzon7aphar3x4l5b77nsylgyw26kntbi4m2wemrjh72aczeh27f6qd.onion
Darknet marketplace with vendor verification and escrow.
vck75uosucwzxgyp6yofroujgtasyuubkem7jh65r5ha5fmb6ztv6qqd.onion
DarkMatter is a major marketplace specializing in cannabis and psychoactive substances, known for reliable supply control and an escrow system.
darkmafmzgnsmow5z3spgludhpwxhwbg77oam433fjx3clzh2yp2oaid.onion
BlackOps is a darknet marketplace with escrow protection, PGP-encrypted messaging and multi-signature transactions, supporting Bitcoin and Monero across multiple vendor categories.
blackoogcnxogvymmebfwfjhx4k7efpgeoeytxtsev2lc4pqlbz54qad.onion
Multi-vendor darknet market with escrow and PGP-verified vendor listings.
bar47kfsex6pvvs3iujqeo4fsnxxn67k7usc5jnbdnoozt3gnp4br7yd.onion
DrugHub is a major darknet marketplace operating since 2021 that specializes in narcotics and accepts BTC/XMR payments.
drughuj7l72ig56pza77eriu7yh6qsao4xb4yasq2qfjusxzuq6rlwqd.onion
Omega Market is an established multi-vendor marketplace with multisig escrow, PGP-verified vendors, and 24/7 dispute resolution.
omega7yhz7n4vg4yhf2na2qaaaeatdlqvjbj2juc245mr5muxtnuvgyd.onion
The monthly rhythm of the darknet economy is rarely a slow burn; it is more akin to a series of tectonic shifts followed by aftershocks. September 2026’s intelligence landscape is...
READ FULL BRIEFING →A specific kind of signal precedes most exit scams, but it rarely appears on the front-end of the site. It lives in the transaction data. By the time the forum...
The darknet ecosystem has always been a game of mirrors – and lately, the mirrors are winning. For researchers tracking market uptime and vendor trust, the last several weeks have...
The Forensic Ceiling: Why Bitcoin Tracing Hits a Wall For the last decade, the standard playbook for law enforcement in cryptocurrency cases has been remarkably consistent. Investigators follow the money...
The numbers hit you when you actually read the TRM Labs data side by side....
> READ MOREThe last mile decides who is still standing. Onion sites get seized, escrow gets drained,...
> READ MOREThe phrase “burner identity” makes purchased accounts, SIMs, and mailboxes sound disposable and clean. They...
> READ MOREAnalyzing darknet marketplace deposit structures usually starts with a simple question: who holds the private...
> READ MORE"Documenting the undocumented with forensic precision."
NULLSEC is operated by a collective of independent security researchers, investigative journalists, and academic professionals specializing in cybercrime ecosystems and darknet economics. Our team includes former threat intelligence analysts from major security firms and contributors to peer-reviewed publications on underground marketplaces.
Every listed address undergoes multi-source verification: PGP signature validation against known administrator keys, cross-referencing with official forum announcements on Dread, historical address chain analysis, and automated uptime monitoring. Addresses without verifiable cryptographic provenance are marked as unverified or excluded entirely.
Unlike link aggregators that scrape and republish unverified addresses, NULLSEC operates with editorial oversight. We do not monetize traffic, run affiliate schemes, or accept payment for listings. Our status indicators reflect real-time automated checks, not cached data. When markets exit-scam or are seized, we document it immediately with forensic analysis.
This resource serves journalists covering darknet markets, academic researchers studying underground economies, law enforcement analysts, cybersecurity professionals conducting threat intelligence, and harm reduction organizations. We do not facilitate transactions and explicitly discourage illegal activity.
Access .onion addresses exclusively through official Tor Browser. Never use web proxies, VPN-over-Tor, or Tor-over-VPN configurations. Download from torproject.org only.
Set Tor Browser security level to SAFEST. This disables JavaScript, WebGL, and other fingerprinting vectors. Legitimate markets function without JS enabled.
Always verify .onion addresses against PGP-signed canary statements. Phishing sites replicate interfaces exactly. One character difference means complete compromise.
Encrypt all communications with vendor PGP keys. Verify key fingerprints through multiple channels. Never transmit plaintext addresses or credentials.
Bitcoin is transparent and traceable. Monero provides ring signatures, stealth addresses, and RingCT by default. Use XMR-only markets when possible. Avoid exchanges requiring KYC.
Copy verified .onion addresses directly to Tor Browser. Always verify PGP signatures before proceeding. Practice operational security at all times.
This directory is provided for research, journalism, and educational purposes only. Tor Research — Darknet Markets Intelligence does not facilitate, encourage, or condone illegal activity.