Real-time verification status for active darknet marketplaces. Forensic-grade address validation. Research-only intelligence feed for journalists, academics, and security analysts.
omega7yhz7n4vg4yhf2na2qaaaeatdlqvjbj2juc245mr5muxtnuvgyd.onion
bar47kfsex6pvvs3iujqeo4fsnxxn67k7usc5jnbdnoozt3gnp4br7yd.onion
blackoogcnxogvymmebfwfjhx4k7efpgeoeytxtsev2lc4pqlbz54qad.onion
vck75uosucwzxgyp6yofroujgtasyuubkem7jh65r5ha5fmb6ztv6qqd.onion
Established multi-vendor market with hybrid escrow and PGP-signed feedback.
torzon7aphar3x4l5b77nsylgyw26kntbi4m2wemrjh72aczeh27f6qd.onion
Darknet marketplace with vendor verification and escrow.
vck75uosucwzxgyp6yofroujgtasyuubkem7jh65r5ha5fmb6ztv6qqd.onion
DarkMatter is a major marketplace specializing in cannabis and psychoactive substances, known for reliable supply control and an escrow system.
darkmafmzgnsmow5z3spgludhpwxhwbg77oam433fjx3clzh2yp2oaid.onion
BlackOps is a darknet marketplace with escrow protection, PGP-encrypted messaging and multi-signature transactions, supporting Bitcoin and Monero across multiple vendor categories.
blackoogcnxogvymmebfwfjhx4k7efpgeoeytxtsev2lc4pqlbz54qad.onion
Multi-vendor darknet market with escrow and PGP-verified vendor listings.
bar47kfsex6pvvs3iujqeo4fsnxxn67k7usc5jnbdnoozt3gnp4br7yd.onion
DrugHub is a major darknet marketplace operating since 2021 that specializes in narcotics and accepts BTC/XMR payments.
drughuj7l72ig56pza77eriu7yh6qsao4xb4yasq2qfjusxzuq6rlwqd.onion
Omega Market is an established multi-vendor marketplace with multisig escrow, PGP-verified vendors, and 24/7 dispute resolution.
omega7yhz7n4vg4yhf2na2qaaaeatdlqvjbj2juc245mr5muxtnuvgyd.onion
Ask anyone who’s been in the game longer than a year, and they’ll tell you the same thing: the market is not the risk. The vendor isn’t the primary risk....
READ FULL BRIEFING →The darknet market ecosystem has always been a game of cat and mouse, but the introduction of generative AI into the equation changes the rules of engagement. For the past...
For all the technical sophistication of the Tor network, PGP encryption, and multi-signature wallets, the vast majority of deanonymizations on darknet markets don’t happen because of a cryptographic breakthrough. They...
For years, the common narrative around darknet market takedowns was one of technical wizardry – the FBI cracking Tor, or Europol deploying some mythical zero-day exploit to deanonymize entire user...
The numbers hit you when you actually read the TRM Labs data side by side....
> READ MOREThe last mile decides who is still standing. Onion sites get seized, escrow gets drained,...
> READ MOREThe phrase “burner identity” makes purchased accounts, SIMs, and mailboxes sound disposable and clean. They...
> READ MOREAnalyzing darknet marketplace deposit structures usually starts with a simple question: who holds the private...
> READ MORE"Documenting the undocumented with forensic precision."
NULLSEC is operated by a collective of independent security researchers, investigative journalists, and academic professionals specializing in cybercrime ecosystems and darknet economics. Our team includes former threat intelligence analysts from major security firms and contributors to peer-reviewed publications on underground marketplaces.
Every listed address undergoes multi-source verification: PGP signature validation against known administrator keys, cross-referencing with official forum announcements on Dread, historical address chain analysis, and automated uptime monitoring. Addresses without verifiable cryptographic provenance are marked as unverified or excluded entirely.
Unlike link aggregators that scrape and republish unverified addresses, NULLSEC operates with editorial oversight. We do not monetize traffic, run affiliate schemes, or accept payment for listings. Our status indicators reflect real-time automated checks, not cached data. When markets exit-scam or are seized, we document it immediately with forensic analysis.
This resource serves journalists covering darknet markets, academic researchers studying underground economies, law enforcement analysts, cybersecurity professionals conducting threat intelligence, and harm reduction organizations. We do not facilitate transactions and explicitly discourage illegal activity.
Access .onion addresses exclusively through official Tor Browser. Never use web proxies, VPN-over-Tor, or Tor-over-VPN configurations. Download from torproject.org only.
Set Tor Browser security level to SAFEST. This disables JavaScript, WebGL, and other fingerprinting vectors. Legitimate markets function without JS enabled.
Always verify .onion addresses against PGP-signed canary statements. Phishing sites replicate interfaces exactly. One character difference means complete compromise.
Encrypt all communications with vendor PGP keys. Verify key fingerprints through multiple channels. Never transmit plaintext addresses or credentials.
Bitcoin is transparent and traceable. Monero provides ring signatures, stealth addresses, and RingCT by default. Use XMR-only markets when possible. Avoid exchanges requiring KYC.
Copy verified .onion addresses directly to Tor Browser. Always verify PGP signatures before proceeding. Practice operational security at all times.
This directory is provided for research, journalism, and educational purposes only. Tor Research — Darknet Markets Intelligence does not facilitate, encourage, or condone illegal activity.