0O
zero and capital O
The trap
Fake Torzon Market mirrors and links
How the fakes look, the tricks that actually get used, and what to do if you already typed your password on one.
Torzon Market onion addresses
7iaj3wjpffjg5acgxqqbjkerdwkcxrzetp4gnsoofaa5lukrmuhcdjad.onionatmqbitgx7g5c4gdc4t23erlpvub7c3agbmky6on6vxcfs26fuj3usqd.oniondgkozv5myc3lfpedjl2khhk6icok2xm5wmc5vg42xvbyh4fs345mopyd.onionevwigej45n3nywbn3aqdun4o6cgjyfgxf2ts7lm6no3uotxanpeuosad.onionfr6bvsrcx7ajxou7kyme5otctzdmpllum6iqootcjnwmzepuuams2tad.onionh3h66vql4ucodjre4bluwtywhoq2bjqxpgvxgv2xo2nkui5ney6gslqd.onionjcyjjcu4oocqkgxyq4d6mmbuuha5db7iz3zifhf2cm6n6m5mvogxwqyd.onion
All of them open the same market with the same account, balance and orders. There is no primary address and the order is not a ranking. Copy one, paste it into Tor Browser, and check the address bar before you sign in.
01Why fakes exist
Because the reward is high and the cost is near zero. Anyone can run a copy of the login page and put it behind an address that looks almost right. One stolen password is a funded wallet. A directory of real mirrors exists because people keep finding the fake ones first.
02The common tricks
01
The one-character address
A real address with a single character changed, usually to something that looks the same at normal reading speed. You will not catch it by glancing. You catch it by comparing, which is what the check is for.
Does not fix: Reading speed. Slow down and compare the ends of the string, not the middle.
02
The dead-mirror replacement
The old address is down, use this one. It sounds helpful and it is the most common setup. The real mirrors do not need an announcement page to tell you where they moved.
Does not fix: Urgency and convenience. The real list on this site does not ask you to rush.
03
The clearnet proxy
An .onion.to or tor2web page loads the mirror through a gateway you do not control. The address works in a normal browser, and the gateway sees your whole session, including the password and the wallet. It is a convenience that costs you the point of using Tor.
Does not fix: The proxy. Use a plain .onion address in a Tor client instead.
04
The extra step
The page looks right, then adds a step the real login does not have: a verify-your-identity form, a fee to unlock the account, a seed phrase it wants you to type in.
Does not fix: The added field. The real login asks for a username, a password, and a 2FA code if you set one. Nothing else.
03Characters that look alike
These pairs are where one-character fakes hide. When you compare, give the ends of the string a second look.
1l
one and lowercase L
1I
one and capital i
0D
zero and D, in some fonts
5S
five and capital s
8B
eight and B
04If you already typed your password
- Get to a real mirror using the list on this page and change the password there. The change only sticks if it is made on the real site.
- Check that 2FA is on, and that you still hold the recovery code.
- Look at open orders and the wallet balance. Move what you can out of the market wallet.
- Assume anything you entered on the fake is gone. Do not argue with it, just replace it.