The lead
Three of the markets we track rotated onion addresses this month. Every rotation is a fresh opening for fake mirrors, so this edition leads with what changed, who to distrust, and how to check an address before you ever paste it into Tor.
Filed 2026-08-23 · Edition No. 41
Mirror watch
After a batch of address changes, scraped copies of two market front pages started showing up under look-alike onions. We walk through the tells and point to the signed address of record.
2026-08-23 · News
Review
Our longest-running scorecard subject holds up on uptime and encryption, but dispute handling still lags and the mirror set keeps moving. We grade it Caution and explain each mark.
Updated 2026-08-23 · Reviews
Compare
One leans on scale and rotation, the other on tighter escrow and faster support. A dimension by dimension read on which crowd each one actually fits.
2026-08-23 · Compare
Method
Seven dimensions, a public rubric, and a rule we never break: no score without evidence we can point at, and no "online" label without a fresh probe from somewhere that measures it.
Standing page · Method
Editorial
Nearly everybody who loses funds to a fake onion knew how to check it. The problem is treating the check as a judgement call instead of a fixed routine. Six steps, in the order they have to happen.
2026-08-25 · News
Review
A Canada-facing venue whose smallness is genuinely an advantage right up until the moment one person is unavailable. Graded Caution across seven qualitative dimensions.
2026-08-26 · Reviews
Review
The narrowest positive statement this journal makes, with the meaning of the word held to its definition. Strong on support cadence, thinner on accumulated record.
2026-08-26 · Reviews
Compare
A comparison we cannot finish, published with the empty column left in. Why an absent assessment is not the same as a poor one.
2026-08-26 · Compare
Reliable pipes, weak support desk. Use escrow and verify the mirror every time.
Score 3.3 / 5
Human-scale and familiar, with no redundancy anywhere in the operation. Size your exposure accordingly.
Qualitative grade · no score
Answers predictably and rotates conservatively. Shorter record than the older venues we track.
Qualitative grade · no score
Rubric not completed against evidence we checked ourselves. Compared against Torzon with the column left empty.
No score yet
Cleanest onboarding of the set and a stable address, with a smaller vendor pool.
Score 3.9 / 5
A retrospective grade. Empire exit-scammed in 2020; any revival using the name is a lure.
Score 1.4 / 5
Too little verified data to grade. We would rather print Unrated than invent a number.
No score yet
Most onion-market coverage online falls into two camps: link directories that will list anything for a fee, and forum threads that repeat whatever the loudest poster claims. Neither camp grades a market against a fixed rubric, and neither one will print a low score if it costs them traffic or a placement deal. Onionland Review exists to be a third option: a reading journal that scores every onion market it covers against the same seven-dimension rubric, in public, with the losing grades left in.
The name is a description, not a brand flourish. This is a journal about the onion side of the darknet-market ecosystem specifically — Tor hidden services, not clearnet look-alikes — and every review, comparison and news item on Onionland Review exists to help a reader tell a genuine onion address from a clone before they paste it into a browser.
No banner ads run on Onionland Review. No affiliate link anywhere on Onionland Review pays out when a reader clicks through to a market. No market, mirror operator, or promoter has ever paid to move up a list, appear in a comparison, or avoid an Avoid grade — and none ever will, even where refusing costs Onionland Review direct access or an early tip.
A score out of five on Onionland Review reflects the seven-dimension rubric documented on the methodology page: uptime pattern, security practice, escrow handling, vendor base, user experience, support responsiveness, and longevity. A Caution grade, like Torzon's, means real weaknesses sit alongside real strengths — it is not a euphemism for Avoid, and it is not softened to protect a relationship with anyone covered. An Unrated market, like Prime above, means the evidence does not yet exist to print a number, and Onionland Review would rather say that plainly than invent one.
This journal does not try to duplicate general Tor education that is already maintained better elsewhere. For the mechanics of onion routing and hidden-service addressing, the Tor Project's own onion services documentation is the primary source Onionland Review defers to rather than re-explaining from scratch. For operational-security guidance beyond what a single market review can responsibly cover, the Electronic Frontier Foundation's Surveillance Self-Defense guide and Privacy Guides' Tor documentation cover browser configuration, bridge usage, and threat modeling in more depth than belongs in a market scorecard. Where a review references Monero specifically, the Monero project's own user guides are the reference Onionland Review points to rather than paraphrasing wallet mechanics secondhand. Onionland Review's own job stays narrow by design: grading markets against the seven-dimension rubric, not re-teaching Tor from first principles.
This week's lead item covers three markets rotating addresses. Understanding why rotation happens, and why it is exactly when clones appear, is worth its own section rather than a passing mention in the news item.
A hidden service can lose an address to sustained DDoS pressure, an operational security decision, or simple infrastructure migration. Rotating to a fresh onion is a normal, often defensive move — it is not inherently a red flag about the market itself, unlike an address going dark with no replacement announced anywhere.
The window between an old address failing and a new one becoming widely known is precisely when a phishing clone has the best odds: confused users searching for "the new address," forum posts spreading unverified links, and no settled canonical source yet for a newcomer to check against. Clone operators watch for rotation announcements specifically because that confusion is their opening.
During an active rotation, Onionland Review treats every candidate replacement address as unconfirmed until it clears the same verification standard used for any other entry: reachability, content matching the expected market, and cross-referencing against a second independent source before print. A rotation in progress is reported as exactly that — in progress — rather than resolved before it actually is.
An Onionland Review rotation note is a snapshot, timestamped to the moment it was written, not a live feed. When Onionland Review reports "address rotating, new mirror unconfirmed," that status can change within hours — the honest response is to check back rather than treat the note as permanently current. Onionland Review would rather publish a rotation note that reads "unconfirmed" for a day than print a new address before the verification standard above has actually cleared it, even though the slower, more cautious version of the note is less exciting to read.
Onionland Review will not print a candidate replacement address sourced only from a forum thread or a single unverified tip, no matter how many people in that thread vouch for it. The bar stays the same during a chaotic rotation window as it is on any ordinary day: reachability confirmed, content matching the expected market, and a second independent source before anything goes into an Onionland Review page as a verified address. Lowering that bar during exactly the window when a phishing clone is most likely to appear would defeat the entire purpose of running Onionland Review as a cautious, slower-moving reference in the first place.
The four verdict labels used across Onionland Review's reviews look simple, but each one carries a specific, deliberate meaning that is worth spelling out once, in full, rather than leaving readers to infer it from context.
A Recommended grade, like Nexus above, means the seven-dimension rubric turned up no disqualifying weakness and at least several clearly strong dimensions. It does not mean risk-free — no onion market coverage on Onionland Review claims that — it means the balance of evidence is clearly positive.
Caution, Torzon's current grade, is the label most often misread as a soft Avoid. It is not. Caution means specific, named weaknesses (in Torzon's case, dispute handling and mirror stability) sit alongside genuine strengths (uptime, encryption practice) — a reader should weigh both, not just the label.
Avoid is reserved for a documented disqualifying issue — an exit scam, as with Empire, or comparable evidence of harm to users. It is never used simply because a market is unfamiliar or under-covered; that situation gets Unrated instead.
Unrated, Prime's current status, means the rubric has not been completed for that market because sufficient verified evidence does not yet exist — not that the market is assumed bad. Printing Unrated instead of guessing a number is a deliberate editorial choice, not an oversight.
A grade printed on Onionland Review is not permanent. It is revisited when something material changes: a documented security incident, a sustained pattern shift in one of the seven rubric dimensions, or enough elapsed time that the original evidence base is no longer current. Onionland Review does not re-run the full rubric on a fixed calendar for every market regardless of whether anything changed — that would waste effort on markets that are stable while under-checking ones going through real turbulence. Instead, Onionland Review prioritizes re-review around the markets showing the most change, which is also why the "Recent grade changes" list above tends to cluster around markets already flagged elsewhere on this page.
When a grade on Onionland Review changes, the change is dated and the reason is stated — never a silent edit to a published score. This is the current changelog for grades covered on this edition's front page.
Readers sometimes land here looking for a live uptime dashboard or a comprehensive address directory, and it is worth being explicit about why Onionland Review is neither of those things by design. A directory's job is completeness: list every known address for every known project, updated as fast as possible. A status board's job is currency: show what is reachable right now, refreshed continuously. Onionland Review's job is neither — it is judgment, applied slowly and stated honestly, to a smaller set of markets we have actually done the work to evaluate.
That narrower scope is a deliberate tradeoff, not a limitation we are working to remove. A journal that tries to also be the fastest directory and the most current status board ends up doing all three jobs worse, because each one rewards a different kind of speed-versus-care tradeoff. We link out to dedicated directory and verification projects for the jobs they do better than we would, and we keep our own remit to what a review, a comparison, or a piece of mirror-rotation reporting can responsibly claim: a snapshot, dated, with the reasoning shown.
Use Onionland Review to decide which market fits your situation and to understand why a grade is what it is. Use a dedicated, continuously-checked directory for the current address of record at the moment you actually need to connect. The two jobs complement each other; neither substitutes for the other, and treating a review site's last-checked date as a live status is the single most common way a reader here gets burned by a rotation Onionland Review has not yet re-verified.
A bare numeric grade answers "how good is this market," but it does not answer "how does this market compare to the one I already use" or "did anything change this week that affects a market I already trust." That is why Onionland Review runs a comparisons section and a mirror-churn news feed alongside the core reviews, rather than shipping scores in isolation. A reader who already picked a market from an Onionland Review score still needs to know when that market's mirror rotates, or when a competitor closes a gap the original review flagged — the score alone goes stale faster than the reasoning behind it, which is why Onionland Review keeps revisiting covered markets rather than publishing a review once and leaving it untouched indefinitely.
No. No market, mirror operator, or promoter has ever paid to move up a list, appear in a comparison, or avoid an Avoid grade, and none ever will, even where refusing costs Onionland Review direct access.
Caution means real weaknesses sit next to real strengths on the seven-dimension rubric. Avoid is reserved for a documented disqualifying problem, such as a confirmed exit scam. The two are not points on the same soft gradient.
Because a low score should reflect evidence of a problem, not an absence of data. When the rubric cannot be completed with verified evidence, Onionland Review prints Unrated rather than inventing a number that looks more authoritative than it is.
No. This journal defers to a dedicated status board for live up-and-down readings and cites its figures inside each review, rather than claiming to run its own probe infrastructure.
Because the old address you already verified is exactly the one a clone will target once it stops resolving. A rotation is the moment to re-verify against a current signed source, not to assume your saved address is still safe to reuse indefinitely.
The seven-dimension rubric on the methodology page is a standing document, revised rarely and only with a stated reason when it happens — grades are not re-weighted quietly to move a specific market's score.
No, and it deliberately avoids trying to be one. We print the verified address of record for whichever market a specific review or news item is actually about, dated to when we last confirmed it, but we do not maintain a comprehensive, continuously-updated directory the way a dedicated indexing project does — that is a different job with a different set of tradeoffs, and we link to that kind of project rather than duplicating it poorly.
The same way any careful reader would: monitoring each covered market's own announcement channels, cross-checking a new claimed address against a signed source before treating it as real, and watching for the phishing-clone activity that predictably follows a genuine rotation. We do not run a 24/7 automated probe network yet, which is exactly why every address we print carries a specific last-checked date instead of an implied live status.