Verified links.
No guessing.

Every legitimate DrugHub link is published on the official Dread subforum with a PGP signature from the DrugHub admin key. Copy the .onion address from this page, compare it character by character against the Dread announcement, and only proceed if they match exactly.

No signature? Don't use it. A signature that fails verification means either the message was tampered with or the key is wrong. Either way — stop. Verify through a second independent source before proceeding.

Privacy Network marketplaces face DDoS attacks constantly. When the primary address is under sustained attack, it becomes unreachable. DrugHub's END GAME DDoS protection handles most attacks transparently, keeping uptime at 96.7% over the monitored period. The system works at the infrastructure level, so you typically don't need separate mirror addresses — the primary route re-routes automatically.

If DrugHub does publish additional addresses in the future, they'll appear here on the same day as the PGP-signed Dread announcement. Until then, one verified address is the correct count.

When DrugHub publishes a new or updated link, the administrators sign the announcement using their PGP private key. You verify the signature using their public key — available on the marketplace and on Dread. A valid signature proves the message came from whoever controls the private key. It cannot be forged without access to that key.

In practice: open GnuPG, import the DrugHub public key, then run gpg --verify announcement.asc. A "Good signature" result is your green light. Anything else — wait, and verify through another channel.

Not necessarily. Tor routing introduces latency and occasional failures that have nothing to do with the destination server. First: check that your Tor Browser is connected (the onion icon should show a working circuit). Try navigating to another known .onion site to confirm Tor itself is working.

If Tor is working but DrugHub specifically is unreachable, it may be a short DDoS spike or a brief maintenance window. DrugHub's 96.7% uptime means outages are rare and typically short. Wait 20–30 minutes and retry before assuming the address has changed.

Yes — but bookmark this directory page (drughubplace.sale/mirrors/), not the raw .onion address. Onion addresses can rotate when the market cycles infrastructure for security reasons. If you bookmark the .onion directly and it changes, your bookmark becomes a dead end.

This page updates the same day any official rotation is announced. Bookmarking here means you always have a route to the current verified address without searching forums or risking exposure to phishing search results.

Using Tor without a VPN is fine for .onion access — Tor's exit node doesn't expose your IP to .onion servers (the traffic stays inside the Tor network). Adding a VPN before Tor (VPN → Tor) hides your Tor usage from your ISP, which matters in jurisdictions where Tor use is unusual. The VPN provider does see that you're using Tor, so choose a no-log provider like Mullvad.

For the strongest isolation, Tails OS routes all traffic through Tor by default, runs entirely from RAM, and leaves no trace on the host machine. Whonix offers similar isolation in a VM environment.

There is no fixed schedule. Address changes happen in response to security events — sustained DDoS campaigns, infrastructure migrations, or following a security disclosure. When a change happens, the team publishes a PGP-signed announcement on Dread within hours. This directory is updated the same day.

Since August 2023, address rotations have been infrequent. The END GAME DDoS system handles most attack scenarios without needing a full rotation, which is why the current address has remained stable.

Trust the PGP-verified Dread announcement. If there's a discrepancy between what's here and what's on Dread, it could mean this page is in the process of being updated — or in a worst case, it has been compromised. Do not use either link without independent verification.

Check a second independent source (trusted community forums, the Signal or Briar channels where DrugHub updates are shared). If you believe this page has an error, report it via the Dread thread. Your report helps other users.

DrugHub has associated clearnet domains (drughub.su, drughub.link) used for public announcements. The actual marketplace only runs on .onion. Never enter login credentials or initiate a Monero payment through a clearnet URL — those are announcement-only pages with no connection to the secure marketplace infrastructure.

Clearnet + privacy network bridging is a known attack vector. In 2025, security researchers noted that clearnet infrastructure associated with DrugHub was accessible in ways that could expose server metadata. For all actual activity, stay inside Tor.