Home › TorZon mirrors
TorZon onion mirrors: rotation, slots, and the PGP check
A torzon onion address is a v3 hostname, and a torzon mirror is another one that opens the same storefront. The operator keeps several live so one slow circuit does not close the market. This page explains the set. It does not dump the strings — a printed hostname goes stale and a poisoned copy outranks it.
The mirror set
Treat the list as slots. When an address rotates out, the others keep accounts, balances and orders intact. There is no public calendar for the next rotation.
| Slot | Role | When to use it |
|---|---|---|
| Primary | Default torzon link | First try each session |
| Mirror 1 | Hot spare | Primary stalls or times out |
| Mirror 2 | Hot spare | Both above fail |
Community write-ups in 2026 still describe a large spare pool. The exact count moves. What does not move is the rule: only addresses inside the latest signed message are current.
PGP verification
- Source the key twice. Market community profile plus a session you already trust. Never take the key from the same page that offers the address.
- Match the full fingerprint. Forty hex characters. A short key ID is not enough; clones reuse lookalike short IDs.
- Verify, then copy from the payload.
gpg --verifymust say good signature from that key. Ignore onions in comments, ads, or banners outside the signed block.
How clones are built
Generators keep the visible prefix of a real torzon onion and randomize the middle. Readers who check the first eight characters and the last four still lose. Diff all 56 base32 characters. A clearnet domain that says it is the official TorZon shop is the other clone class: the market has no clearnet storefront.
Session routine
Open Tor Browser, confirm the signed file is newer than your last visit, copy one slot, load it, and compare the URL bar before any password. If the page asks you to “update your mirror” to a string that is not in the signed file, close it. Next: the TorZon access checklist.
What a good mirror page looks like
The real storefront is the same after any slot: same login, same order history, same vendor names. A clone copies the CSS and breaks on the second click, or it loads a login that never matches an old account. Visual similarity is not the check. The signed payload is the check.
| Signal | Real rotation | Clone |
|---|---|---|
| Address source | Inside the signed block | Ad, comment, or DM |
| Old account | Still there | “Register again” or empty history |
| URL bar | All 56 characters match | Prefix matches, middle differs |
| Clearnet domain | Does not exist for the shop | Claims to be the official shop |
Why lists on blogs go stale
A torzon onion that was correct in spring can be retired by autumn. Pages that paste the string keep ranking after the string dies, and readers follow the dead page into whatever replaced it. This desk describes the slots and the signature instead, so the page stays true when the set moves. Re-read the signed file; do not re-read a blog from March.