A buyer on Dread last month typed his seed phrase into a “wallet verification” page that mimicked Cake Wallet’s interface. By the time he realized the URL ended in “.xyz”…
183 published posts
A buyer on Dread last month typed his seed phrase into a “wallet verification” page that mimicked Cake Wallet’s interface. By the time he realized the URL ended in “.xyz”…
On March 23, 2023, users of the darknet market Incognito Market woke up to find their vendor balances frozen under the pretext of a “system upgrade.” Within 72 hours, roughly…
Last year, a researcher I work with watched his entire transaction history get linked back to his home IP because he forgot to flip one toggle in Electrum before broadcasting…
A buyer on a cryptoforum I follow recently posted about losing three friends in a single month to counterfeit pills cut with fentanyl — none of them had a test…
Security researchers identified an active phishing campaign on June 12, 2026, impersonating Drughub Market, one of the better-known storefronts on the Tor network. The campaign uses cloned login pages and…
A buyer I know lost $800 because he trusted a phishing link that looked identical to Incognito Market’s login page, then sent Bitcoin straight from a KYC exchange wallet. The…
A user on Dread last week described the exact moment they realized their mistake. They had clicked a link in a Telegram group promoting an “early access” token claim tied…
A vendor I know needed to convert Monero into Bitcoin last week without touching a centralized exchange — and the choice between Bisq and Robosats turned out to be more…
A vendor I know lost his entire inventory last month because he kept Tor’s security slider on “Standard” while logging into Nexus Market. A session correlation attack tied his login…
A buyer I spoke with last week lost 0.4 BTC to a vendor on a mid-tier marketplace after the seller marked the order as shipped, then vanished from the platform…
A buyer I know lost $800 because he trusted a phishing link that looked identical to a major market’s login page. The URL was off by two characters, the certificate…
Last month, a user on Dread posted that their home IP leaked into a market admin’s logs because they forgot to disable Wi-Fi before booting Tails from a USB that…
This directory is provided strictly for informational and research purposes. DarkScope does not host, operate, or maintain any marketplace. No links on this site lead to illegal content. All .onion addresses are presented as redacted reference data for academic and journalistic research into darknet infrastructure patterns.
This archive provides no direct links to illegal services, does not facilitate any transactions of any kind, and does not enable access to listed platforms. Address tokens are placeholders for verification reference only. Users are solely responsible for their own actions and jurisdictional compliance.