Marketplace Access Information
This page provides current marketplace onion links with real-time status monitoring. Mirrors are verified through PGP signatures and updated regularly for Canadian users.
đź”’ Viewing Access Information
To view marketplace links and mirrors:
- Return to homepage and review security information
- Navigate back to this access page
- Current mirrors will be displayed with status
Available on This Access Page:
- âś“ Current marketplace mirrors with v3 onion addresses
- âś“ Real-time online/offline status for mirrors
- âś“ Response times for performance assessment
- âś“ Historical reliability ratings for uptime
- âś“ PGP verification information for authenticity
- âś“ Step-by-step connection instructions for Canadian access
Understanding the Mirror System
Why Multiple Mirrors Exist
The marketplace operates multiple mirror sites to ensure continuous platform availability regardless of individual server status. Unlike traditional websites hosted on single servers, links are distributed across numerous independent onion services. Each mirror functions as a complete replica of the marketplace, enabling users to access the market through alternative URLs if their primary link becomes unavailable. This distributed mirror architecture protects against DDoS attacks, server failures, and targeted takedown attempts.
The links directory maintains real-time status monitoring for all official mirrors. When you visit this access page, you see current uptime statistics, response times, and reliability ratings for each marketplace mirror. This transparency enables Canadian users to select the fastest, most reliable links for their geographic location. Mirror servers are strategically distributed globally, though the marketplace exclusively serves Canadian users—the geographic distribution enhances censorship resistance and platform resilience.
Each marketplace mirror uses v3 onion addresses consisting of 56 characters. These modern onion URLs provide significantly stronger security than legacy v2 addresses. Links using v3 onion protocol benefit from improved cryptography (Ed25519 elliptic curve), larger address space preventing enumeration attacks, and built-in offline keys enabling secure server administration. All mirrors synchronize continuously, ensuring your account data, messages, and orders remain consistent regardless of which marketplace link you access.
How Mirror Verification Works
Verifying authentic links is critical for user security. Phishing sites frequently impersonate popular marketplaces, creating fake mirrors to steal user credentials. The official marketplace publishes PGP-signed mirror lists on trusted platforms including Dread, Dark.Fail, and this verified clearnet resource. Every official link appears in these signed lists—any URL not listed should be considered potentially malicious and avoided.
When you access a mirror for the first time, the marketplace displays a welcome message signed with the official PGP public key. Users should verify this signature before entering any credentials. The marketplace PGP fingerprint is publicly published on multiple trusted sources. By verifying the PGP signature on the welcome message, you confirm you're accessing an authentic link rather than a phishing site. This verification process takes only moments but provides critical protection against credential theft.
Links are added to this directory only after rigorous verification by the platform's security team. Each new mirror undergoes testing to confirm it connects to legitimate marketplace infrastructure. The access page automatically removes mirrors that fail health checks or exhibit suspicious behavior. This continuous monitoring ensures all listed links remain safe for Canadian users. If you discover a suspicious URL not listed here, report it to the community through Dread or other trusted channels—protecting fellow Canadians from phishing scams is a community responsibility.
Avoiding Phishing Attacks
Identifying Fake Mirrors
Phishing attacks targeting marketplace users have become increasingly sophisticated. Attackers create convincing fake mirrors that closely resemble authentic sites, hoping users will enter credentials without verifying authenticity. These fake links are distributed through search engines, forums, and compromised websites. Once users enter credentials on fake mirrors, attackers use the stolen information to access real accounts on the legitimate marketplace, draining escrow balances and stealing personal data.
To protect against phishing, Canadian users must verify every link before use. The most reliable verification method involves checking the marketplace PGP signature on the welcome message. Authentic mirrors always display a PGP-signed message upon first visit—if a URL doesn't show this signed message, it's likely a phishing site. Additionally, authentic links use specific v3 onion address formats. Memorize or bookmark your verified marketplace URLs rather than searching for links through search engines, where phishing sites often rank highly.
Another common phishing technique involves slightly altered URLs with minor spelling variations. Attackers register onion addresses that look similar to legitimate links—changing a single character in the 56-character onion address. These fake mirrors rely on users not carefully verifying the complete URL. Always triple-check links character-by-character before entering credentials. Copy official URLs from this verified access page or other trusted sources rather than typing them manually, reducing the risk of typos leading you to phishing sites.
Safe Access Practices
Establishing safe access practices protects your marketplace account from compromise. First, bookmark verified links in Tor Browser immediately after confirming their authenticity through PGP signature verification. Only access mirrors through your bookmarks—never follow links from untrusted sources, emails, or private messages. Even if someone claiming to be an administrator sends you a link, verify it against this official access directory before clicking.
Enable Tor Browser's security level to "Safest" when accessing the marketplace. This setting disables JavaScript and other features that could potentially identify your system or enable fingerprinting attacks on mirrors. While some links may function better with JavaScript enabled, security should always take priority. The marketplace is designed to function fully with JavaScript disabled, ensuring users can safely access links while maintaining maximum privacy protections through Tor Browser's safest configuration.
If you suspect your account has been compromised through a phishing attack, take immediate action. First, access the marketplace through a verified link from this official directory. Change your password immediately using a strong, unique password you've never used elsewhere. Enable or update your 2FA settings. Check your escrow balance and recent order history for unauthorized activity. If funds were stolen, report the compromise to marketplace administrators through PGP-encrypted messages. The support team can sometimes freeze compromised accounts or track stolen funds, though prevention through careful link verification is always preferable to recovery after compromise.
Trusted Link Sources
Beyond this official access page, several trusted community resources maintain verified links directories. Dread, the darknet forum community, hosts an official marketplace subreddit where administrators post PGP-signed mirror lists. Dark.Fail maintains an independently-operated onion service that aggregates verified links alongside other legitimate marketplace URLs. Recon, another darknet directory service, includes verified mirrors in its marketplace listings. Cross-reference links across multiple trusted sources—if a URL appears in all verified directories, it's almost certainly legitimate.
Never trust links from search engines without verification. Google, Bing, and other clearnet search engines cannot access .onion URLs, but attackers often create clearnet phishing sites claiming to provide marketplace access. These fake "gateway" sites either steal credentials directly or redirect users to phishing mirrors. Similarly, ignore links shared on untrusted forums, social media, or messaging apps. Treat all URLs as potentially malicious until you verify them against official sources and confirm PGP signatures. The few minutes spent verifying links properly can prevent account compromises that cost hundreds or thousands of dollars in stolen funds.