RapTor: Darknet Market Reviews, and the Tools to Check a Link Yourself

RapTor is an independent site covering the Tor ecosystem from the outside. Two kinds of reader land here and the site is built for both: someone holding a link for a named darknet market who wants to know whether it is the real one, and someone learning Tor, PGP, Monero, self-custody and opsec from scratch who wants exact steps rather than a specification. We do not run, host, mirror or represent any market, we take no money from one, and we sell nothing. What we publish in place of confidence is the working — every figure carries whose claim it is and the date it was made, every verification procedure is written out so you can run it yourself, and the numbers nobody outside a market can measure do not appear at all.

Start with the errand you arrived with

Find the row that matches what you actually came to do. Every page named here exists and is written to settle that one job.

What you came for, and the page that answers it
You arrived wanting…	Open this	What it settles
To know which markets are actually running, and which one to look at	the darknet markets directory	A dated table of the six markets we cover — what each one is for, which coins it takes, and whose count that scale figure is
To check a specific market's address before you use it	TorZon, Nexus, DarkMatter, DrugHub, BlackOps, WeTheNorth	Each page opens on the address block and the check that confirms it, then reviews the market — escrow model, coins, where it is weak
To get onto Tor at all, from a clean install	the Tor Browser guide	Where the real download is, how to confirm the file is genuine, and what to click on first launch
To know whether Tor alone is enough, or whether you need a VPN too	Tor Browser safety and Tor vs. VPN	Which security level fits your actual risk, and what each tool hides — including the restart step that decides whether a level change took effect
To connect where Tor is blocked	Tor bridges	Which pluggable transport to try first, in what order, and how to tell a dead bridge from a blocked one
To understand why one wrong character in an address is a different site	how Tor works and onion services	The three-hop circuit and who sees what at each point; then why a `.onion` address is a public key rather than a registered name
To encrypt a delivery address, or check a signed mirror announcement	what PGP is, how to use PGP, PGP verification on the dark web	The concepts, a full Kleopatra walkthrough, and the exact commands for verifying a signed address list — plus what a good signature does not prove
To pay for something without publishing your finances	cryptocurrency privacy and the Monero guide	How Bitcoin privacy actually fails, what an analytics firm does with an address, and where Monero is obtainable now that regulated exchanges have delisted it
To hold coins without an exchange holding them for you	the hardware wallet guide, Ledger and Trezor setup, seed phrase backup	Whether you need a device at all, which to buy and why, and how to store a recovery phrase so it survives fire, theft and you not being around
A whole machine that resists your own mistakes	secure operating systems, then Tails, Whonix or Qubes OS	A pass/fail hardware check first, then the amnesia-versus-isolation decision, then the install guide for whichever one your hardware and threat model point at
To work out what you are actually protecting, and from whom	the OPSEC guide	The threat-modelling exercise itself, four worked examples, and a tiered action list — baseline, raised, high-risk — with the real cost of each tier
To find out what just happened, or whether a market is gone for good	the news desk, the takedown ledger, exit scams	The current stories with their confirmation status; one row per enforcement operation with the primary document; and how to tell an exit scam from a covert seizure

What RapTor publishes, and what it refuses to

Almost nothing about a live darknet market is verifiable by an outsider. Listing counts, user totals, mirror counts, dispute statistics and uptime all originate either with the market itself or with a directory that never said where it got them. That single fact sets the editorial rule for the whole site: a figure without a named source and a date does not get printed here, a status has a check attached rather than a light, and a disagreement between sources stays visible instead of being quietly resolved in whichever direction reads more confident. The about page lists what that rule rules out in full, market by market and refusal by refusal.

Why two sites give different numbers for the same market

The answer decides how you should read every scale figure in this niche, including ours, so it belongs on the front page rather than buried. Most published market statistics are not measurements at all. They are transcriptions of the counter a market displays on its own dashboard, which no outsider can audit and an operator can inflate at will — so the figure is evidence about what the market claims, and a second site quoting the same figure is not corroboration, just a copy. The directory page works through the mechanics, including why two honest directories counting the same catalogue still disagree.

Staleness does the rest of the damage. Europol recorded the BlackOps market listing 41,942 items at its July 2025 launch and 63,979 by the end of that November, and named TorZon, Nexus and BlackOps as the three markets with the largest listing counts by the end of the year.^{Europol, IOCTA 2026} A count taken anywhere inside that window is wrong now, and an undated count is unusable — which is the whole reason for the date beside every figure here.

Even the top tier has spread in it, and pretending otherwise would be its own kind of dishonesty. Chainalysis measures flows on-chain against a stated method rather than reading a dashboard, and its 2026 crypto crime report puts 2025 darknet market inflows at "nearly $2.6 billion" in its summary and "slightly over $2.5 billion" in the body of the same report.^{Chainalysis, 19 February 2026} That is not an error worth scolding anyone over — it is what an honest estimate looks like when the underlying thing is genuinely fuzzy. It is also the clearest argument for attribution: a figure quoted to the dollar across four sites with no source named is one unchecked claim wearing four hats.

Every scale figure on this site is written so you can tell which of these three rows it came from.

Why the market pages don't work without the tool guides

Because the market pages do not work without the other half. Confirming an address means understanding that a .onion address is a cryptographic key; encrypting a delivery address means knowing how PGP works; paying for anything without leaving a permanent public trail means knowing what a blockchain analyst can do. A market page that skips all of that is a link, and a link is the thing phishers are best at supplying.

It also matters that the network underneath is not a criminal invention. Onion routing was designed in 1995 by David Goldschlag, Michael Reed and Paul Syverson at the U.S. Naval Research Laboratory, the Tor network was deployed in October 2002 under a free and open licence, and the Tor Project became a 501(c)(3) nonprofit in 2006 — the same software carries journalists, censored readers and activists, and was central to the 2013 Snowden disclosures.^{The Tor Project, history} Most people who land on this site are on it for reasons that have nothing to do with a market, which is why the guides are written to stand on their own.

If you are new to all of this, this order works

Read how Tor works before installing anything. Ten minutes here heads off the two assumptions that cause the most avoidable harm later — that Tor protects what you type into a site, and that the last relay in your circuit cannot read unencrypted traffic passing through it. Neither is true, and neither is a flaw in the software.
Install and verify Tor Browser using the setup guide, then set your security level with the safety page. Skipping the verification step means you have no idea what you just installed.
Do the threat-modelling exercise in the OPSEC guide. It decides everything after this, and it is the step that tells you which of the heavier precautions on this site you can reasonably skip — most of the advice aimed at this audience was written for a threat model far above the reader's actual one.
Learn PGP properly with the concepts page and then the walkthrough. This is the step people put off, and it is the one that makes address verification and encrypted messaging possible at all.
Sort out money before you need it: what a stranger can see on a blockchain, then Monero, then how to back up a recovery phrase. Doing this in a hurry is how people lose funds to their own filing system rather than to anyone's attack.
Only then consider a dedicated system. The operating systems page starts with a hardware pass/fail check, because on the wrong laptop the answer is decided for you.

Who publishes this, and what it has to do with the markets

RapTor is written and maintained by RapTor Admin, who covers this ecosystem from outside it. There is no relationship with any market to disclose: no ownership, no partnership, no affiliate arrangement, no paid placement, no advertising, and no market has ever been able to buy a mention, a position in the directory table, or a softer review. That is not the norm on these topics: on several of them, the pages competing with ours are selling the tool they recommend, and it shows in what they leave out.

Where the pages say "we checked" or "when we last looked", that describes work done on the date the page names. The editor's page lists the subjects covered here, the sources each review and guide is written from, and the standards applied to them. The about page states what RapTor publishes and refuses to publish in the same terms as this section, the privacy page describes exactly what the site does with visitors' data, and the disclaimer sets the limits — this is information, not legal or medical advice, nothing here makes anything lawful, and the legal and health exposure discussed on the market pages is real and depends on where you live.

What this site is tracking right now

The market set above was last read against its sources on 13 September 2026, which is the honest form of a freshness claim here: nobody outside a market can confirm it is operating today, so every page states when we last looked instead of showing a status light that would be a guess.

The news desk carries the current stories with their confirmation status attached, which matters more in this subject than in most — a large share of "dark web" coverage repeats what criminals say about their own inventory. Two recent examples of the difference: an identity-theft service advertising scans of more than 153 million driver's licences went offline within hours of Brian Krebs publishing the investigation that traced its data to a Louisiana identity-verification firm,^{KrebsOnSecurity, 1 September 2026} and the U.S. Secret Service and Treasury announced the seizure of the Xinbi Guarantee marketplace's Telegram channels and roughly $52 million in restrained cryptocurrency on 9 September 2026 — a marketplace that is not a Tor site at all, which is the sort of distinction the coverage usually flattens.^{U.S. Secret Service, 9 September 2026} If a page here ever states something you can check and it turns out to be wrong, the fault is ours and the citation on that sentence is where to start.