Darknetlive

ToRReZ Market is Retiring

ToRReZ Market is retiring, according to an announcement from the market’s administrators.

In October 2021, White House Market announced their retirement after a successful run. Less than two months later, ToRReZ Market, which launched as the “first community-driven market,” announced their retirement as well.

Mr. Blonde, the ToRReZ administrator who signed the farewell message, hinted at the possibility of a return in the future. In the message, the administrator warned against using established marketplaces; they said that markets grow closer to collapse as they age. Traditionally, retiring markets have suggested users migrate to certain “friendly” markets or equally well-established markets. Mr. White, the administrator of White House Market, encouraged users to migrate to Monopoly Market or Versus Market. He highlighted Monopoly Market’s walletless system and Versus' enforced multi-sig.

A picture of The message is available on the ToRReZ homepage. My demo account on the marketplace is “NickiMinaj”

The message is available on the ToRReZ homepage. My demo account on the marketplace is “NickiMinaj”

Unrelated Warning About Market Shutdowns

As with any market shutdown, there is a slim chance that law enforcement is controlling the entire narrative in a repeat of Operation Bayonet. Operation Bayonet, for newcomers, was a law enforcement operation in 2017 that thoroughly disrupted the darkweb market ecosystem. International law enforcement agencies collaborated to secretly take control of the second-largest marketplace at the time, Hansa Market. LEOs had taken control of the market’s servers and had posed as the market’s administrators for several weeks before the reveal.

A picture of The banners used for Alphabay and Hansa

The banners used for Alphabay and Hansa

Investigators made subtle changes to Hansa Market in an attempt to identify careless vendors and customers. Last I checked, these methods by themselves resulted in very few arrests. Per Wikipedia:

  • All user passwords were recorded in plaintext (allowing police to log into other markets if users had re-used passwords).
  • Vendors and buyers would communicate via PGP-encrypted messages. However, the website provided a PGP encryption convenience feature which the police modified to record a plaintext copy.
  • The website’s automatic photo metadata removal tool was modified to record metadata (such as geolocation) before being stripped off by the website.
  • Police wiped the photo database, which enticed vendors to re-upload photos (now capturing metadata).
  • Multisignature bitcoin transactions were sabotaged, which at shutdown would allow police to confiscate a larger amount of illicit funds.
  • Police enticed users to download a Microsoft Excel file (disguised as a text file) that, when opened, would attempt to ping back to a police webserver and unmask the user’s IP address.

I have one of the .xlsx/.zip files somewhere provided by a former Hansa Market vendor. I will upload it for your viewing pleasure if I can find it.

A picture of The onion service deployed by LE after the Hansa bust.

The onion service deployed by LE after the Hansa bust.

Once law enforcement had set the stage at Hansa Market, other law enforcement agencies shut down AlphaBay Market, the largest marketplace at the time. They seized AlphaBay servers and arrested the alleged administrator, Alexandre Cazes in Thailand. While in a jail in Thailand, Cazes hanged himself rather than spend his life behind bars in a U.S. prison.

As law enforcement had predicted, former users of AlphaBay flocked to the second-largest marketplace at the time: Hansa Market. Law enforcement had control of Hansa at this time and gathered as much information as they could. After several weeks had passed, law enforcement pulled the rug out from underneath Hansa users, replacing the marketplace with a seizure banner similar to the one used during the AlphaBay seizure.

Law enforcement operations targetting marketplaces, at least as we understand them, have not involved such intricate and dramatic steps since the AlphaBay and Hansa seizures. Law enforcement in the Netherlands knocked on hundreds of doors of alleged customers who had neglected to encrypt their addresses when completing a purchase on Hansa Market. However, the infiltration of Hansa Market resulted in very few instances of vendor deanonymization.

Why the warning is unrelated

Although ToRReZ is undoubtedly a large market by today’s standards, it is not the largest market nor is it the most well established. If law enforcement agencies were to attempt a repeat of Operation Bayonet, they would presumably seize the larger market first and push people to the smaller market second. ToRReZ, in their retirement message, explicitly encouraged users to move to a newer marketplace. All newer marketplaces are significantly smaller than the current well-established marketplaces.

The ToRReZ announcement

Below is the ToRReZ announcement.

Dear Users.

After 675 days of presence on the darknet, we have decided to close our door for good. Please read the following statement to understand the market’s closure process.

From 2021-12-17 certain functions of the market has been disabled: registering, upgrading to vendor account, purchasing, featured items auctions, support.

Market wallets are working fine and are ready to get your withdrawals requests. Because we use fully automated system, please be ready for queues when it comes to the withdraw. We especially expect the queue on XMR withdrawals (because of how XMR is built).

Market will be left online for at least two to three weeks until all orders are finalized and disputes are closed. We will review the disputes on the daily basis so you can withdraw your funds as quick as possible. Buyers and vendors - please work with us on your disputes. Please provide information about the package status. Do not be a dick to each other. We give you an opportunity to leave the market with your gear or funds so help us to achieve that. Vendors trying to use this opportunity to exit scam will be banned. We also share our vendor’s data with Recon.

If you forgot your mnemonic / pin / password / pgp - there is nothing we can do about it. If your deposit did not come - it is because you got phished and there is nothing we can do about it. If you paid for the order and it is not on the list - it is because you got phished and there is nothing we can do about it.

It has been a great pleasure to work with most vendors and users. We are aware that we leave quite a big gap in darknet markets but we hope most of you will find a new home. While choosing a new market, please use your common sense. I would personally avoid any “established” market as older they get, bigger chance of collapsing is. Please give a chance to the smaller markets, which are not that loud as others. This is exactly how we became no 1 - being quiet and doing our job, serving customers 24/7 for 675 fucking days.

While ToRReZ will be gone for good, we might (or not) come back at some stage with something different. The whole world goes green. Maybe we will join the trend at some stage ;] When we decide to be back, we will definitely sign the message with one of the known keys so watch out for any copycats.

If you have anything to say to me, you can use Dread’s system but I give no warranty that any of your messages will be read, not to mention that they will not get answered.

Thanks for supporting us. mrblonde

ToRReZ Market Team

--ToRReZ market news: yxuy5oau7nugw4kpb4lclrqdbixp3wvc4iuiad23ebyp2q3gx7rtrgqd.onion/news


Signed Message
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Dear Users.

After 675 days of presence on the darknet, we have decided to close our door for good. Please read the following
statement to understand the market's closure process.

- From 2021-12-17 certain functions of the market has been disabled: registering, upgrading to vendor account,
purchasing, featured items auctions, support.

Market wallets are working fine and are ready to get your withdrawals requests. Because we use fully automated system,
please be ready for queues when it comes to the withdraw. We especially expect the queue on XMR withdrawals (because
of how XMR is built).

Market will be left online for at least two to three weeks until all orders are finalized and disputes are closed.
We will review the disputes on the daily basis so you can withdraw your funds as quick as possible.
Buyers and vendors - please work with us on your disputes. Please provide information about the package status.
Do not be a dick to each other. We give you an opportunity to leave the market with your gear or funds so help
us to achieve that.
Vendors trying to use this opportunity to exit scam will be banned. We also share our vendor's data with Recon.

If you forgot your mnemonic / pin / password / pgp - there is nothing we can do about it.
If your deposit did not come - it is because you got phished and there is nothing we can do about it.
If you paid for the order and it is not on the list - it is because you got phished and there is nothing we can do about it.

It has been a great pleasure to work with most vendors and users. We are aware that we leave quite a big gap
in darknet markets but we hope most of you will find a new home.
While choosing a new market, please use your common sense. I would personally avoid any "established" market
as older they get, bigger chance of collapsing is.
Please give a chance to the smaller markets, which are not that loud as others. This is exactly how we became no
1 - being quiet and doing our job, serving customers 24/7 for 675 fucking days.

While ToRReZ will be gone for good, we might (or not) come back at some stage with something different.
The whole world goes green. Maybe we will join the trend at some stage ;] When we decide to be back,
we will definitely sign the message with one of the known keys so watch out for any copycats.

If you have anything to say to me, you can use Dread's system but I give no warranty that any of your messages
will be read, not to mention that they will not get answered.

Thanks for supporting us.
mrblonde

ToRReZ Market Team
-----BEGIN PGP SIGNATURE-----
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=zk/f
-----END PGP SIGNATURE-----

The amazing thing is that currently, one of the “established” markets for general criminal activity is Dark0de which was a new market taking loads of criticism not too lon ago. Eventually, we will inevitably be in the same situation with only the strange reboot of Alphabay remaining as an “established market.” Filering out search engine results for specialty markets and ToRReZ, Monopoly, Versus, and Dark0de lead. ToRReZ is technically still higher than all three but that will soon drop. However, these metrics can hardly be considered reliable traffic metrics; no sensible darkweb user searches Google to find the address of a darkweb marketplace. The majority of users who make more than a single purchase presumably bookmark the market’s address, this site, or Dark.Fail (or perhaps one of the many phishing clones of our sites). Additionally, just because someone searched Google for a site and visited Darknetlive as a result does not mean they stuck with the market they searched. I have no analytics available for traffic metrics. No tracking whatsoever. Nginx access logs are disabled. I realize this is no longer the right way to eliminate error logging. Regardless, it should not matter over Tor as I am unable to identify different users.

With that said, I will upload something and an on-site PoC for fingerprinting users even with javascript off. Far from a novel concept but certainly something worth considering for those with less experience in this sector.

30 Comments
Do you really want to comment here? not rules
aa585132
91b31440 Fri, Dec 17, 2021

I think alphabay is a honeypot

924c1b99
521d2f60 Fri, Dec 17, 2021

No shit?

51b961a4
0f136a30 Tue, Jan 11, 2022

yea, dread and reddit are fucking retarded for believing its real

59758a89
6e513a40 Fri, Dec 17, 2021

Pity, I liked the platform - sleek UI, no-nonsense, intuitive navigation, pragmatic and reliable. Retiring gracefully is of course on the plus side as well after all. Thanks and farewell!

a2e3db98
a8b7a980 Sat, Dec 18, 2021

alphabay ares and quest are run by a group of scammers mr professor and his group of exit scammers dont join those markets unless u wanna lose money no smart vendor will work there. torrez is closing the next best place to shop is darkode after that asap and new market called gangland and hermes ... gangland and hermes admins vowed to never shut down willingly

141670f2
178f06b0 Sat, Dec 18, 2021

darkode is one of the shitty market in this whole wide world

d16ef28e
5049f030 Sat, Dec 18, 2021

darkode is trash

56b6442e
3efcb8d0 Sat, Dec 18, 2021

Much disinformation?

I have proven I am indeed the same person from before through PGP, verified by Dread admins, ex-AlphaBay staff that remained free, more old users and admins of forums that are older than Dread (est 2009, 2010,2011 etc) where I was registered way back and I was able to reclaim my accounts on there too.

Comparing us to these markets is funny in itself they have no proven history whereas I am verified not only on Dread and darknet but on other hacking, malware and fraud forums where it is much more strict.

Thank you.

3fd95943
fd217110 Sat, Dec 18, 2021

Monopoly andVersus are the only good markets left y the fuck are you mntiong darkode lmaoaoo

90f2c2c6
12ccf710 Sat, Dec 18, 2021

Jealous little admins yet again with their FUD campaigns. Same person replying to himself hilarious.

I have proven I am indeed the same person from before through PGP, verified by Dread admins, ex-AlphaBay staff that remained free, more old users and admins of forums that are older than Dread (est 2009, 2010,2011 etc) where I was registered way back and I was able to reclaim my accounts on there too.

Also we are building a decentralized marketplace to ensure the future of the darknet market scene. Due to jealous admins like you who focus on FUD and attempting to destroy others instead of prosperity and peace there has been no innovation (excluding endgame) in the scene in the last 4 years.

We are here to change that we have been known for our innovation and we continue with that. We already have AlphaGuard, automated dispute resolution (ADR) etc. Not to mention you as an admin are most likely using the many features we created many years ago such as putting cc/account autoshop, sticky listings, featured listings, introducing monero as payment option, signing deposit addresses and many many more. So instead of spreading FUD with pathetic campaigns I suggest you show a bit of respect for the ones that paved the way today for even you to get paid.

Last if you use PGP everywhere and your opsec is good it does not matter if any market is acting malicious or honeypot.

Thank you.

00f2e275
9759b530 Sat, Dec 18, 2021

@DeSnake maybe you can fool newbies but you won’t cheat old users with your bullshit about AlphaGuard, you did not do nothing and just because you can’t prove it you say that yes, you took weeks just to implement something really basic like showing the listing’s price in different fiat currencies!! Where is your innovation? Or the innovative guy indeed was Cazes and not you? Please show some respect for the fallen

And by the way you look pathetic saying to everyone that does not suck your dick “jealous admins” or “secret society that control the darknet”

And re-launching a market that was already busted can be only two options: you are much more idiot that I think or it is a honeypot. Nobody with more than two brain cells will want a double target on his back and pay the double sentence for admiting previous felonies public

3853b9e2
49b89660 Mon, Dec 20, 2021

Too bad alphabay wanted to make a new UI from scratch because the old UI was absolutely great. The new AB UI sucks bad. It's hard to navigate and not at all intuitive. DeSnake, you know you can buy the old code on some other marketplaces, right? :D DO IT!

a0a05c23
318e8190 Mon, Dec 20, 2021

BLANKSLATE you can’t buy it desnake answered on dread only him Alex and police had it, must knockoffs or empire script

new ab interface is much better the old one had shit everywhere now finding anything takes 1 second

430805bd
bd9c1a10 Sat, Dec 18, 2021

If you start selling on Alphabay, Police will be arresting you as soon as the market performs exit scam.

Do you remember Hansa? Alphabay is the same, it is powered by the police.

Problem is new users do not know about this but Alphabay servers were seized by the police and all the PGP got seized as well.

If you check the market code, it is not properly done. All is fake, the product counter, the vendor counter, everything is fake.

Police already announced this last year, they were going to create a fake market using Alphabay identity. They have all the PGP Key of alphabay market, cazes the administrator and the moderators.

I just feel sorry for all the buyers writing their addresses in the market because they don’t know police is getting their addresses.

d7d470de
fedcf990 Sun, Dec 19, 2021

Monopoly and Versus are trash verus stole my money and ... darkrode is the only place i would shop or asap.. asap market has been around for 2 years.

8c3fe967
6a4e77d0 Sun, Dec 19, 2021

desnake FU ur a thief youll get whats coming to you one day and so will ur team of scammers... gangland market is better they any of the markets ur ever made that u pump and dump on

887d1fc3
658a6cd0 Sun, Dec 19, 2021

Users should be aware that alphabay is a police market. All the market information is fake. Subdread full of fake subscribers and if you notice they always replying to all users with the same message that they keep coping and pasting everywhere, that is all police techniques. Alphabay died when Cazes hanged himself in cell.

1aa628c5
84cbbc10 Sun, Dec 19, 2021

I liked Torrez market as well, RIP. Thank you for the rundown on the Hansa / Alphabay seize, that was good information for safe conduct. For example it's better to pgp encrypt addresses yourself than to use the convenience tool just in case.

904c0a07
01a1d890 Sun, Dec 19, 2021

@potz
@9759b530

you took weeks just to implement something really basic like showing the listing’s price in different fiat currencies

Already completed. Unlike other admins I do not rush better be safe then sorry. When I put a new feature out it is polished and has been tested.

On top of all we have been attacked 24/7 with DDoS, working on some of the innovative features you will see soon and on the decentralized market network project.

Also not to brag but we are the first and only market with completely automated dispute resolver system which we launched upon release. No other market has this.

with your bullshit about AlphaGuard

I have said it before but you conveniently decide not to include that in your rant. The source code will be released when the decentralized market network project is fully release and AlphaBay has done full migration to it as at that point it will be nothing more than relic code. If some other marketplace relying on centralization wants it they can get it and use it then. Our decentralized project has scheduled alpha demo end of 2022/early 2023 so probably 2-2.5 years away from now.

re-launching a market that was already busted can be only two options:
Yet another salty admin if you had put few words with same tone it would have been fine but writing so ‘passionate’ response it only goes to show. Fact is your little group does not like that we are independent and do not play part of the group and yes there is indeed a group that does serial exit scams every year different market. With our decentralized project that will come to an end hence why we get so much FUD because you know your little schemes will come to an end.

Just look at the ridiculous comments here @foster ‘All the market information is fake’ under multiple aliases (@MarketInspector) claiming that while in fact every single thing posted is real you can count the listings yourselves. Yes it is indeed admins and their crownies trying with funny attempts to spread disinformation due to our status and us rising much faster then they have. We are indeed the fastest growing marketplace and they hate us for it.

Or @foster saying ‘Subdread full of fake subscribers’ – it has been confirmed by Paris who deleted some weeks before. Any user of Dread knows this if you are daily user on there. As soon as subscriber count started to act weird I alerted Paris who later confirmed it publicly on a FUD topic that was ‘conveniently’ started saying ‘fake subscribers’. He is not around right now but with the new update the real count will be shown. I bet it was the person behind @foster and we all know which market has been spreading super FUD against AlphaBay and Dark0de. They know who they are.

I will not waste time responding to any more comments on here I have made my point. It is up to users whether to use our platform or not. It will be funny though to read what all of you little admins will say when the decentralized project is up and ready because it will eliminate wallet issues (multisig), accessibility (decentralized so very hard to DDoS), impossible to takedown by LE (decentralized) etc.

While all of you admins of places like gangland(wtf is even that) and other markets that are not even on Dread, wage FUD campaigns we are growing and building the future. The last 4 years have been wasted with no innovation thanks to people like you but as I said the day we arrived, we are going to change that (and we already slowly are!).

Thank you.

6d95ef0b
661f06d0 Mon, Dec 20, 2021

Refund everyone that got exit scammed and maybe they will trust you kek aint gonna happen cos its a honeypot, Nobody in their right mind would goto a market that 1. exit scammed and will do it again 2. Possibly a honeypot

b3d8d8e7
1627b0f0 Mon, Dec 20, 2021

police busted the wallets they didn’t exit scam i personal had issue one vendor in 2016 or 2017 scamwath team stop vendor and gave me and others refund when they could take it for themselves

stop misleading others advertising ares gangland and other unknown scam markets fuck off shill joe

264f28b8
9f228850 Mon, Dec 20, 2021

Don’t take this personally, but it’s not surprising that nobody trusts you and AlphaBay.

Operation Bayonet and what then happened through the AlphaBay Bust with Hansa, manifested itself in the minds of the users. There is no real proof that you are not compromised. Your PGP key can also have been confiscated and your passwords given by yourself to LE to buy your freedom. Cooperation with LE would be nothing unusual. Who wants to be locked up like Ross Ulbricht for their whole life?

The many interviews you give like for example with “Wired” are very unusual for an admin. Most other admins stay underground and release as little information as possible.

Why are you showing up out of nowhere right now? Why were you supposedly the only one who wasn’t caught after such a heavy bust? How do you benefit from AlphaBay calling back to life when it’s not about money, but only about a “clean name”? Are “principles” worth the risk?

Let’s assume you’re telling the truth. Don’t you think that for all LE which where involved in Operation Bayonet, it is a fucking provocation to bring AlphaBay back and they were going to do whatever it takes to repeat their work and make it finally for good?

There are so many questions and risks that simply cannot be ruled out. You may also be telling the truth. But I think for most of the community AlphaBay died with Alexandre Cazes.

Should you tell the truth, of course, I wish you all the best and that this disgusting bust does not repeat itself.

e2f582c5
661f06d0 Mon, Dec 20, 2021

If this person identifying themselves as DeSnake here is the same person identifying themselves as DeSnake on Dread and elsewhere wants to confirm that this poster is the same as that post for the purposes of this conversation or others on this site, just sign a message and post it here and it shoould be automatically flagged as code but if it isn't I will manually do so. Personally I would not bother. However, for the rest of you, keep in mind anyone can call themselves DeSnake here or elsewhere. You should not trust the identities of users here based only on their display names. If you are a regular commenter on this site who is prominent enough to warrant verification, you can let me know and I will set up a method through which you can post validated comments.

fdb2fcc6
1c18fa50 Thu, Dec 23, 2021

DeSnake is totally not compromised or LE, why would I lie?

ff8274ac
312e6820 Mon, Dec 20, 2021

Only fuckin desnake can make closure of another market all about his shitty site

b6e4c5a3
720d5590 Wed, Dec 22, 2021

He actually never said anything Alphabay was mentioned in article and many fake and lie coment after logic he reply!

2cf3e00e
32d01090 Mon, Dec 20, 2021

I don't know. I have used AB twice in the past month with great results. Jelousy seems to be a motherfucker on darknetmarkets lol.

3a6e4705
80f7e0b0 Mon, Dec 27, 2021

As long you dont visit scam markets such as worldmarket. that have a rep of exit scam markets then you will be good

e724dc68
e79f84e0 Sun, Jan 16, 2022

if you think alphabay is an exit scam then youre a fat retard

New comments are disabled after one month in an attempt to limit spam.

See Also