Real-time verification status for active darknet marketplaces. Forensic-grade address validation. Research-only intelligence feed for journalists, academics, and security analysts.
omega7yhz7n4vg4yhf2na2qaaaeatdlqvjbj2juc245mr5muxtnuvgyd.onion
blackoogcnxogvymmebfwfjhx4k7efpgeoeytxtsev2lc4pqlbz54qad.onion
drughuj7l72ig56pza77eriu7yh6qsao4xb4yasq2qfjusxzuq6rlwqd.onion
torzon7aphar3x4l5b77nsylgyw26kntbi4m2wemrjh72aczeh27f6qd.onion
Established multi-vendor market with hybrid escrow and PGP-signed feedback.
torzon7aphar3x4l5b77nsylgyw26kntbi4m2wemrjh72aczeh27f6qd.onion
Darknet marketplace with vendor verification and escrow.
vck75uosucwzxgyp6yofroujgtasyuubkem7jh65r5ha5fmb6ztv6qqd.onion
DarkMatter is a major marketplace specializing in cannabis and psychoactive substances, known for reliable supply control and an escrow system.
darkmafmzgnsmow5z3spgludhpwxhwbg77oam433fjx3clzh2yp2oaid.onion
BlackOps is a darknet marketplace with escrow protection, PGP-encrypted messaging and multi-signature transactions, supporting Bitcoin and Monero across multiple vendor categories.
blackoogcnxogvymmebfwfjhx4k7efpgeoeytxtsev2lc4pqlbz54qad.onion
Multi-vendor darknet market with escrow and PGP-verified vendor listings.
bar47kfsex6pvvs3iujqeo4fsnxxn67k7usc5jnbdnoozt3gnp4br7yd.onion
DrugHub is a major darknet marketplace operating since 2021 that specializes in narcotics and accepts BTC/XMR payments.
drughuj7l72ig56pza77eriu7yh6qsao4xb4yasq2qfjusxzuq6rlwqd.onion
Omega Market is an established multi-vendor marketplace with multisig escrow, PGP-verified vendors, and 24/7 dispute resolution.
omega7yhz7n4vg4yhf2na2qaaaeatdlqvjbj2juc245mr5muxtnuvgyd.onion
The August 2026 threat landscape is not defined by a single spectacular breach, but by a series of structural shifts in how the underground operates. The data emerging from threat...
READ FULL BRIEFING →The death of Abacus Market in mid-2025 wasn’t a seizure, a hack, or a server failure. It was a decision made by the people holding the keys. Reconstructing the collapse...
For years, the conventional wisdom in privacy communities has been straightforward: as long as you use the Tor Browser Bundle, keep your security slider on “Safest,” and never maximize your...
The collapse of a darknet market is rarely the end of the story. The real narrative arc-the one that determines whether a vendor actually retires rich or ends up in...
The numbers hit you when you actually read the TRM Labs data side by side....
> READ MOREThe last mile decides who is still standing. Onion sites get seized, escrow gets drained,...
> READ MOREThe phrase “burner identity” makes purchased accounts, SIMs, and mailboxes sound disposable and clean. They...
> READ MOREAnalyzing darknet marketplace deposit structures usually starts with a simple question: who holds the private...
> READ MORE"Documenting the undocumented with forensic precision."
NULLSEC is operated by a collective of independent security researchers, investigative journalists, and academic professionals specializing in cybercrime ecosystems and darknet economics. Our team includes former threat intelligence analysts from major security firms and contributors to peer-reviewed publications on underground marketplaces.
Every listed address undergoes multi-source verification: PGP signature validation against known administrator keys, cross-referencing with official forum announcements on Dread, historical address chain analysis, and automated uptime monitoring. Addresses without verifiable cryptographic provenance are marked as unverified or excluded entirely.
Unlike link aggregators that scrape and republish unverified addresses, NULLSEC operates with editorial oversight. We do not monetize traffic, run affiliate schemes, or accept payment for listings. Our status indicators reflect real-time automated checks, not cached data. When markets exit-scam or are seized, we document it immediately with forensic analysis.
This resource serves journalists covering darknet markets, academic researchers studying underground economies, law enforcement analysts, cybersecurity professionals conducting threat intelligence, and harm reduction organizations. We do not facilitate transactions and explicitly discourage illegal activity.
Access .onion addresses exclusively through official Tor Browser. Never use web proxies, VPN-over-Tor, or Tor-over-VPN configurations. Download from torproject.org only.
Set Tor Browser security level to SAFEST. This disables JavaScript, WebGL, and other fingerprinting vectors. Legitimate markets function without JS enabled.
Always verify .onion addresses against PGP-signed canary statements. Phishing sites replicate interfaces exactly. One character difference means complete compromise.
Encrypt all communications with vendor PGP keys. Verify key fingerprints through multiple channels. Never transmit plaintext addresses or credentials.
Bitcoin is transparent and traceable. Monero provides ring signatures, stealth addresses, and RingCT by default. Use XMR-only markets when possible. Avoid exchanges requiring KYC.
Copy verified .onion addresses directly to Tor Browser. Always verify PGP signatures before proceeding. Practice operational security at all times.
This directory is provided for research, journalism, and educational purposes only. Tor Research — Darknet Markets Intelligence does not facilitate, encourage, or condone illegal activity.