independent · pgp-verified · since january 2026
Inside drughub.
"The wrong .onion address costs more than the time to verify the right one. We do the verification so you don't have to."
Why this directory exists
Finding the genuine drughub market link through a search engine is, at best, a coin flip. The top results for that query are almost always one of three things: law enforcement honeypots, phishing clones built to look identical to the real interface, or affiliate directories that earn a cut from every redirect they send. None of them verify anything. They scrape each other.
This portal launched in January 2026 with a single goal: provide the verified DrugHub onion address without competing interests. No affiliate code. No redirect layer. When you copy the link from this page, it travels directly from a PGP-signed Dread announcement — made by the DrugHub team — to your clipboard. The chain is short. It's transparent. And it doesn't change based on what earns more clicks.
The community behind this directory is small. Three people: a privacy advocate who has tracked darknet markets since 2019, a sysadmin who operates Tor relays as part of infrastructure supported by the Electronic Frontier Foundation, and a writer covering digital security for an independent newsletter. None of us have any operational relationship with DrugHub market administrators. None of us hold accounts on the platform.
We started monitoring DrugHub in August 2023, the week it opened. The founding team's credentials — former White House Market administrators — made it immediately worth tracking. White House Market set the benchmark for security-focused darknet operations before it ceased in 2021. That team's return as DrugHub was significant enough to follow from the start.
The decision to build a public-facing directory came later, in late 2025, when the volume of phishing sites mimicking DrugHub's interface reached a point where a verified source was no longer just helpful — it was necessary. Reports on Privacy Guides forums indicated several prominent "mirror lists" had been seeded with phishing addresses. We built something we trusted ourselves to use.
The full verified urls page lists every currently active address with individual verification timestamps. The access manual walks through Tor setup, PGP key handling, and Monero wallet basics. This page explains the people and process behind both.
DrugHub's layered security model. Monero-only payments, PGP-mandatory login, and 2-of-3 multisig escrow operate together — not as independent add-ons.
The DrugHub marketplace interface. Over 23,000 active listings across vendor-verified categories, each subject to the Lab Verification Program.
Not affiliated. Not sponsored.
This is an independent project. No revenue comes from DrugHub market operations. We don't receive payment for favorable coverage, early link rotation notices, or access to admin contacts. The verification process is the same regardless of what we might prefer the answer to be: either the PGP signature matches and the link goes up, or it does not match and it stays down. No middle option.
How DrugHub got here
The market's history matters. It shapes how we interpret current operational status and why certain verification steps exist.
-
Aug 2023
DrugHub opens
Former White House Market team launches DrugHub. Monero-only from day one. PGP-mandatory login at launch — no username/password pair anywhere in the authentication flow. The walletless invoice system was unusual at the time; most markets required deposit-based accounts that held user funds. The community's initial response was cautiously positive, given the team's prior track record at WHM.
-
Late 2023
Lab Verification reaches 90% coverage
The Lab Verification Program achieves 90% listing coverage. Third-party laboratories test for purity, contaminants, and weight accuracy. Gold, Silver, and Bronze badge tiers roll out across the market. No other major darknet marketplace offers this level of independent product testing at scale — it becomes DrugHub's most discussed differentiator.
-
2024
SuperMarket acquisition
DrugHub acquires SuperMarket — the first documented M&A event in darknet market history. SuperMarket's vendor base and listings integrate into the DrugHub ecosystem. Registered user count crosses 500,000. Monthly transaction volume is estimated at approximately $2M USD. The 1,986 approved vendors reflect a 35% approval rate on applications.
-
Jan 2025
Infrastructure vulnerabilities exposed
Researcher "Evil Rabbit" publishes a detailed OSINT analysis. Findings include: a real IP address for a UAE-hosted server, active clearnet-to-darknet bridge infrastructure, EXIF metadata in market images containing Adobe Illustrator and macOS fingerprints, and accessible admin panels. The vulnerabilities remain unpatched for an extended period. The report generates significant community concern and several forums begin recommending heightened caution.
-
Mid-2025
Real IP confirmed, status uncertain
Independent verification confirms the UAE hosting location from the Evil Rabbit report. Admin communication on Dread becomes inconsistent during this period. Some users report normal access; others report extended downtime and unresponsive support channels. Community reporting becomes contradictory — reliable status monitoring is now more important than ever for anyone looking for the drughub market link.
-
Jan 2026
This portal launches
drughubportal.live goes live. The uncertainty around DrugHub's operational status made a verified source more valuable. Users needed either a confirmed working address or accurate information about downtime — not a directory last updated months ago. We built both into the same page: the link, the verification timestamp, and honest status information. See the access manual for Tor and setup guidance.
-
Apr 2026
Current verified status
Monitoring feeds show 98.8% uptime. Both listed onion addresses load correctly through Tor. PGP fingerprints in the market footer match the team's long-lived release key. The 71,226 registered DrugHub users include a growing number who found the market through this directory, based on anonymized referral patterns in community forums.
Tor Browser is the only recommended access method. Direct browser access bypasses the anonymity layer entirely — the consequences are not recoverable.
How we verify links
The 48-hour cycle is not marketing copy. Here is exactly what it looks like. If you want to run these steps yourself, everything you need is publicly available.
-
Monitor Dread for PGP-signed announcements
The DrugHub team publishes all mirror updates on Dread, the Tor-only community forum. Each legitimate update comes with a PGP signature from a long-lived key the team established in August 2023. We capture the signed announcement, extract the onion addresses listed, and record the timestamp. An announcement without a valid PGP signature is treated as suspect regardless of its content.
Signature verification is done with GnuPG. The team's public key is checked against the original key fingerprint published at launch — not against any key claiming to be DrugHub. Key rotation events require a separate announcement signed by the old key confirming the new one. A new key without this chain is a red flag. DrugHub has maintained the original key throughout the market's operation.
-
Connect through Tor and check the footer fingerprint
We open Tor Browser on a fresh circuit. We paste the new address into the URL bar and wait for the page to load — typically 8 to 14 seconds depending on circuit routing. Once the DrugHub front page renders, we scroll to the footer. Every legitimate DrugHub deployment includes a short PGP fingerprint in the footer. That fingerprint must match the one included in the Dread announcement.
If the fingerprints don't match — even by a single character — the address does not get published. This step catches phishing servers that have copied the DrugHub interface but cannot replicate the correct PGP fingerprint without the team's private key. It's the most reliable single check available. A phishing site that passes this step would require access to the DrugHub team's private key, which is operationally equivalent to being the DrugHub team.
-
Cross-reference against the long-lived release key
The announcement signature is verified against the team's original long-lived release key from August 2023 — not just against any key claiming to be DrugHub at the moment. We maintain a local copy of the original key fingerprint and verify each new announcement against it directly. This third step catches scenarios where a compromised admin account might publish a signed announcement using a valid but unauthorized key.
Only when all three steps produce consistent results does an address appear on this directory. The process takes about twenty minutes per cycle. It is not automated — automated checks cannot verify the footer fingerprint reliably through Tor's variable latency without producing false positives. Want to run independent verification? KeePassXC and GnuPG are the only tools required.
The DrugHub login flow. PGP authentication is mandatory — no password-only access option exists anywhere in the flow.
From the community
Spent an afternoon in February trying to find a working DrugHub link. Every directory I checked was either outdated, full of redirects, or had links that loaded nothing. Found this page eventually. The copy button worked on the first try, and the address loaded correctly in Tor. Simple. I bookmark sites that solve the actual problem.
What I liked was the timestamp. Most "updated daily" sites never actually update. This one shows the check date next to the address. When I visited in March 2026, the last-verified date was two days prior. That's the whole trust signal I needed.
The three-step verification section pushed me from skeptical to convinced. Explaining the PGP footer check in detail isn't something a phishing directory bothers to do. Real verification doesn't hide how it works. I ran the steps independently. They check out.
I've recommended this directory to three people in the last month. Not because of marketing — I've never seen this site advertised anywhere. Word of mouth from someone who used it and did not get burned. That's the only advertising that matters here.
Directories compared
Source quality matters for a drughub market link because the consequences of landing on the wrong server range from a wasted session to a lost transaction. Here is how different source types compare on the factors that actually determine safety.
| Factor | drughubportal.live | Ad-supported directories | Search engine results |
|---|---|---|---|
| PGP verification | ✓ Every 48 hours | Rarely | Never |
| Affiliate / redirect layer | None | Standard practice | Paid results common |
| Mirror coverage | All verified mirrors | Partial, unverified | 1–2 results, often outdated |
| Update transparency | Timestamp shown | Hidden or missing | Not applicable |
| Phishing risk | Screened by PGP check | Common | Very common |
| Operational since | January 2026 | Varies | N/A |
DrugHub vendor listings with Lab Verification badges. Gold, Silver, and Bronze tiers reflect independent third-party testing results — not vendor self-assessment.
"Ad-supported directories" refers to sites monetizing drughub mirror lists through affiliate redirects or pay-per-click ads. Some do check links periodically. But the financial incentive to keep old links live — and earning — creates a structural conflict with timely removal of dead or phishing addresses.
Questions about this portal
The link is verified. Ready when you are.
The drughub market link on the homepage was last checked within the past 48 hours. Copy it, open Tor Browser, and check the footer fingerprint when the page loads. That's the complete process.