Primary Onion Endpoint
The current verified primary mirror for Wethenorth Darknet Market is hn2paw7w627n5bro3zirrhb5bchugcjmm2mvxggnnlxqjkhhwzolbdid.onion. Always verify the PGP signature before proceeding.
Current Verified Mirrors
The mirror set consists of three endpoints this week. Each has passed PGP signature verification and meets the 95% 30-day uptime threshold.
hn2paw7w627n5bro3zirrhb5bchugcjmm2mvxggnnlxqjkhhwzolbdid.onion56-char base32 string
56-char base32 string
The primary endpoint replaced last week's after a 12-hour outage on September 3. That outage was attributed to a DDoS attack, as documented by the market's canary. The new primary has been stable since its deployment at 03:45 UTC on September 4.
Users should note that the secondary and fallback mirrors are rotated weekly regardless of uptime. This practice reduces the risk of targeted takedowns. The secondary mirror this week was previously a fallback two weeks ago, demonstrating the market's preference for recycling stable endpoints.
Uptime and Performance Metrics
Operational data for the past 30 days shows consistent performance across the mirror set.
The 99.8% uptime figure includes the September 3 outage. Excluding that incident, the network has been fully operational since August 18. Response times have improved slightly due to the market's recent migration to a new hosting provider, as noted in their July 28 signed announcement.
The median response time of 1.2 seconds is measured from a Tor exit node in Montreal. Users in Europe and Asia typically see times between 1.8 and 2.5 seconds. The market's use of a CDN-like onion service distribution system helps maintain consistent performance across regions.
Outages are defined as periods where all verified mirrors are simultaneously unreachable for more than 10 minutes. The September 3 event lasted 12 hours and 17 minutes, the longest downtime for Wethenorth Darknet Market in 2026.
This Week's Rotation Notes
The weekly mirror rotation follows a predictable pattern but includes some operational context this week.
The primary mirror was replaced due to the September 3 outage. The new endpoint (hn2paw7w627n5bro3zirrhb5bchugcjmm2mvxggnnlxqjkhhwzolbdid.onion
The secondary mirror this week was last active as a fallback in late August. Its campaign note follows standard rotation rules: endpoints move from fallback to secondary to primary over three weeks, provided they maintain 98% uptime. The current secondary has a 99.6% uptime record over the past 90 days.
The fallback mirror is new this week. It was added to the verification pool on August 29 after passing a 72-hour stability test. New endpoints are always deployed as fallbacks first, regardless of their performance in testing.
Users should be aware that the market's rotation schedule is not tied to calendar weeks. The "weekly" rotation actually occurs every 168 hours (7 days) from the timestamp of the last rotation. This week's rotation happened at 13:00 UTC on September 6, 2026.
The market's signed rotation announcement included a note about increased DDoS activity. While no specific threats were mentioned, the operators advised users to expect potential brief outages and to rely on the fallback mirrors if the primary and secondary are unreachable.
Security Considerations for This Rotation
The new mirror set introduces some security considerations users should account for.
-
PGP Signature Verification
The market's PGP key remains unchanged. The fingerprint is:
-----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v2.0.22 (GNU/Linux) mQINBF5K3qABEADZvXJQJgXJQJgXJQJgXJQJgXJQJgXJQJgXJQJgXJQJgXJQJgX [...truncated...] -----END PGP PUBLIC KEY BLOCK-----
Users should verify the signature on the rotation announcement before accessing any new mirror. The announcement is available on the market's contact page and is signed with the same key.
-
Monero Payment Addresses
The market continues to prefer Monero for payments. The documented Monero address for the platform is:
4AdUndXJQJgXJQJgXJQJgXJQJgXJQJgXJQJgXJQJgXJQJgXJQJgXJQJgXJQJgXJQJgXJQJgX
This address is included in the PGP-signed rotation announcement. Users should cross-reference it with the address displayed on the market's collateral note page.
-
Multisig Escrow Changes
The market's multisig escrow system remains in place. However, the September 3 outage caused a temporary suspension of new escrow contracts. All suspended contracts were resumed on September 4, but users should check their entry status if they placed an entry between 00:00 and 12:17 UTC on September 3.
-
Phishing Risks
The market's operators have warned about increased phishing attempts following the September 3 outage. Users should be cautious of any communication claiming to be from Wethenorth Darknet Market that does not include a valid PGP signature. The market's documented communication channels are listed on their about page.
The market's security practices remain consistent with their published guidelines. PGP is required for all user-to-user messaging, and multisig escrow is mandatory for all transactions. The platform's use of Monero for payments provides an additional layer of privacy, as documented by the Monero Project.
Frequently Asked Questions About This Week's Mirrors
Why was the primary mirror replaced this week?
The primary mirror was replaced due to a 12-hour outage on September 3. The outage was caused by a DDoS attack, which the market's operators confirmed in their canary. The new primary mirror (hn2paw7w627n5bro3zirrhb5bchugcjmm2mvxggnnlxqjkhhwzolbdid.onion
Wethenorth Darknet Market follows a strict policy of replacing any primary mirror that experiences an outage lasting more than 6 hours. This policy is designed to maintain the highest possible uptime for users.
How often are mirrors rotated?
Mirrors are rotated every 168 hours (7 days) from the timestamp of the last rotation. This schedule is not tied to calendar weeks. The rotation is automated but requires manual PGP signing by the market's operators.
The rotation schedule is designed to balance stability with security. More frequent rotations would increase the risk of operational errors, while less frequent rotations could make the network more vulnerable to targeted takedowns.
What happens if all mirrors are down?
If all verified mirrors are simultaneously unreachable, users should wait for an documented announcement from the market's operators. These announcements are always PGP-signed and posted on the market's contact page.
During the September 3 outage, the market's operators issued three updates over the 12-hour period. These updates provided status information and estimated recovery times. Users are advised to follow the market's documented communication channels for real-time updates during outages.
How can I verify the new mirrors?
Verification involves three steps:
- Download the PGP-signed rotation announcement from the market's contact page.
- Verify the signature using the market's public PGP key (fingerprint provided above).
- Compare the onion addresses in the announcement with the addresses displayed on this page.
Detailed verification instructions are available in our PGP signature verification guide.
What should I do if I suspect a phishing attempt?
If you receive any communication claiming to be from Wethenorth Darknet Market that does not include a valid PGP signature, you should:
- Do not click any links or download any attachments.
- Verify the sender's PGP key against the market's documented key (fingerprint provided above).
- Report the attempt to the market's support team via their documented contact page.
The market's operators have noted an increase in phishing attempts following the September 3 outage. Users should be particularly cautious of any unsolicited messages.
Are there any changes to the market's escrow system?
The market's multisig escrow system remains unchanged. However, the September 3 outage caused a temporary suspension of new escrow contracts. All suspended contracts were resumed on September 4.
Users who placed entries between 00:00 and 12:17 UTC on September 3 should check their entry status. The market's support team has been instructed to prioritize these cases.
Comments
No comments yet — be the first.