PGP validation
We match each address against the official master key. If the signature doesn't verify, the address is thrown out without being published. You can run the same check on your own machine, so you don't have to take our word for it.
Opsec & phishing defence — by practitioners
WeTheNorth (WTN) Verified Mirrors, Uptime Monitor & Security Knowledge Hub
WTN Hub is an independent clearnet monitor run by darknet security veterans, with no connection to the WeTheNorth admins. Every v3 onion address listed here is checked against the marketplace's master PGP key before it goes live, because one fake link is enough to cost you a deposit.
New to this? Start here
Get started: safety basics
1
web1.onion
Primary · v3 onion · signed 08 Oct 2026
2
web2.onion
Backup · v3 onion · signed 08 Oct 2026
3
web3.onion
Cold standby · rotated on failover
Transparency
How we verify a link before publishing it
We don't publish a link because someone vouched for it on a forum. Anyone can post an address and call it official. Each one has to pass three separate checks, and failing any one gets it dropped.
Tor network monitoring
Every node is polled through a Tor circuit every hour. After two failures in a row a mirror is marked degraded, and a third failure rotates it out and promotes the backup. The 90-day uptime figure above comes from these polls.
Anti-tampering protection
Every published file has a checksum, and we compare page content on each cycle. If a mirror starts serving injected JavaScript or a rewritten login form, it comes out of the registry within one cycle.
Knowledge base
Guides, rules and money mechanics
Four documents take you from checking a mirror to isolating your machine, learning the rules and paying through escrow. Each one links back here to the verified mirrors. Skip a step and that gap is yours to cover.
Quick answers
Frequently asked questions about the hub
Short answers about how the hub works. Each one links to the full guide if you need the details.
Q Why do mirrors change and get updated periodically?
Addresses are rotated on purpose to survive DDoS attacks and blocked Tor circuits, so a new link doesn't mean the market has a problem. A new address goes live here only after it passes validation against the master PGP key. Ignore any "new link" sent to you on a forum or in a DM.
More about network architecture in the platform overviewQ What should I do if a catalog link doesn't open in the browser?
Usually the Tor circuit timed out. Choose "New Tor Circuit", keep the browser on Safest with JavaScript off, and retry with a mirror copied from this page instead of a bookmark. If every mirror fails, check the status line at the top before you try random links from a search engine.
Troubleshooting connection guideQ How can I technically verify that a link belongs to WeTheNorth?
Only a signature check settles it. Download the signed registry, verify it on your own machine in GnuPG or Kleopatra, and confirm the signature against the marketplace's public key. A familiar design or name proves nothing.
Step-by-step PGP verification guideQ Are buyer funds protected during network failures?
Yes. Your deposit sits in a 2-of-3 multisig contract, and releasing it takes two signatures, so an outage frees nothing. An open dispute also stops the auto-finalize timer. Never press Finalize Early to "help" a vendor, because it ends your protection.
Read the escrow and dispute resolution rules