TOR: http://drughuberjxfrxtlk2cystdz4jvogmc3lsnk5drvwx2nfi63ou2r2kid.onion/
Clearnet backup: https://drughub.io/
another market rises. archetyp gone. abacus gone. incognito burned. the usual cycle.
drughub stands. for now.
passwordless login
no username. no password. pgp only.
sign in with your key or don’t sign in at all. enforced 2fa via signatures. no exceptions.
pgp illiterate need not apply. staff won’t hold your hand. use your favorite search engine or gpt. figure it out.
this filters the truly incompetent. by design.
invoice based
no wallet deposits. no hot wallets sitting on servers waiting for seizure.
order. get invoice. pay exact amount. done.
withdrawals processed offline within 24 hours. if servers get raided funds aren’t sitting there. vendor money isn’t market money until it isn’t.
customer pays 5% commission. transparent about it. other markets hide this in vendor prices anyway. at least drughub admits it.
private mirrors
everyone gets unique mirrors. not rotating. unique.
vendors get two private onions immediately. customers request after activity threshold.
ddos becomes irrelevant when your mirror isn’t the public mirror. clever. simple.
main mirrors under attack regularly. doesn’t matter if you have yours.
temp mirrors don’t expire if logged in. practical.
enforced e2ee
all messages encrypted. vendor key and customer key only.
unless dispute opened. then staff key added. otherwise nobody reads your tracking numbers.
plaintext can’t be recovered if seized. servers hold ciphertext. good luck feds.
vendors got banned for including tracking in quick replies. staff doesn’t play. e2ee enforced for everyone’s protection. yours. theirs. customers.
break this rule speedrun to ban any%.
encryption helper
python script. 280 lines. reverse proxy on your machine.
handles decryption encryption transparently. for vendors drowning in hundreds of messages.
not autoencrypt. never autoencrypt.
tested on tails whonix qubes debian. works out of box on tails. standard modules only.
go version exists. 290 lines. no dependencies. no gnupg backend. compile yourself. never trust binaries.
pgp signed releases. feds can’t slip compromised version without signature failing. assuming you verify. if you don’t verify signatures you have bigger problems.
vendor features
quick replies for generic questions. bulk discounts without spam listings. autosweep when balance hits threshold.
employee accounts with permissions. don’t share your pgp key with hired help.
private custom listings. share listing id directly. doesn’t show in search.
flexible af timer. 5 to 45 days. vendor choice. customers can extend.
if customer extends then forgets dispute available. tracked shipping resolves fast.
listings moderated until account established. bond waived case by case. pgp verification only. if can’t verify via key no waiver. 99% of time bond requested no way around it.
fe granted at staff discretion. criteria unpublished. denied requests may or may not include reason.
af timer
customers forget. then complain.
watch your timer. extend if needed. dispute if needed.
ignoring af then whining makes you look like an idiot. their words not mine.
accounts purged after 6 months inactivity. better opsec anyway.
rules
no external contacts anywhere. protonmail in bio gets warning. twice gets ban. saw vendor try this. limited. promised to behave. did it again two days later. banned.
no russia cis business. no doxxing. no tracking numbers in plaintext. no off market deals.
fentanyl prohibited. weapons prohibited. stolen data from le gov schools hospitals prohibited. porn prohibited except account logins for major sites.
violate rules case by case handling. warning or fine or permanent ban.
staff doesn’t expedite tickets withdrawals disputes. sending new ticket won’t help. just wait.
migration waves
archetyp exit brought influx. abacus collapse brought more.
drughub absorbed them. enforced pgp slows uptake. intentional. weed out the lazy.
vendors from whm know the encryption helper concept. drughub version cleaner. better compatibility.
users complain about ui compared to abacus. staff response: works fine for 99%. if problem for you problem is yours.
pow required to access. need decent cpu. anti ddos measure.
links and mirrors
don’t share private mirrors. linked to your account. won’t work for others except scrapers.
aggressive scraping on your private mirror gets account banned. end of story.
darknet search engines and aggregators contact for api. public pages fine to index. makes everyone’s life easier.
established market
written from scratch. 6 year old account running it. merged with supermarket at some point.
no dread support whatsoever. ticket system only.
vendor applications manually reviewed. denied applications possible. their market their rules. vendors choose customers markets choose vendors.
active vendor flairs on subdread. send modmail not pm. not active or not approved posts removed temp or permanent ban issued.
the usual warnings
verify pgp. watch signin message. best phishing protection.
ignore signin message complain later look like idiot.
every market is future seizure banner. act accordingly.
trust no one. verify everything. opsec is your problem.
current status
archetyp gone. bohemia dead. incognito burned. abacus exit. versus scammed.
drughub online. handling traffic. private mirrors working. enforced pgp holding.
how long. who knows.
markets come and go. this one enforces basics. pgp login. e2ee messages. invoice payments. no hot wallets.
does what it says. no handholding. no tutorials. no patience for fools.
users either figure it out or don’t. staff won’t waste time copy pasting search results.
automated support covers 99.5% of issues. user error almost always.
verdict
functional. secure by default. not pretty but works.
ui could use work. opsec can’t.
if can’t use pgp shouldn’t be here anyway. market self selects for minimum competence.
will it last. probably not. nothing does.
will it exit scam. maybe. they all might.
will it get seized. eventually. they all do.
until then. up and running. private mirrors functional. e2ee enforced. withdrawals processing.
drughub. still online.
for now.
use accordingly.