New TorZon Market Mirrors This Week
http://torzon4lwbzadv33szkmxcskjixn6stm6aoq3wkcytc3irxqemyiimyd.onionThree new verified torzon market mirrors landed in the rotation this week. Updated endpoints, uptime stats, and how to safely rotate them in your bookmarks.
Primary endpoint this week: . Bookmark it, but keep the full mirror table handy.
New Endpoints
TorZon Market’s mirror rotation is a moving target. This week’s batch landed on July 18 after a brief outage on the previous primary. Three new v3 onions now serve the same frontend, backend, and API as the source market.
Each endpoint resolves to a distinct IP, but the PGP-signed manifest remains identical across all mirrors. That’s the verification anchor—if the signature doesn’t match, the mirror isn’t TorZon.
The new endpoints replace two that went dark last Sunday. TorZon’s ops team doesn’t announce removals, but the manifest timestamp flips when a mirror drops. If you’re still hitting an old address, expect a 502 or a timeout.
Uptime & Performance
All three new mirrors are running the latest Tor daemon (0.4.8.12) behind nginx 1.25.3. TLS is enforced via self-signed certs—don’t expect Let’s Encrypt here. The backend still uses the same walletless architecture, so your XMR and BTC confirmations land at the same speed as before: 10 blocks for Monero, 1 for Bitcoin.
Latency varies by exit node. Privacy Guides documents that Tor’s circuit-building can add 1-3 seconds per hop. The new mirrors are hosted in Iceland and Switzerland—closer to European users, farther from North American ones.
How to Rotate Safely
Rotating torzon market mirrors isn’t just about swapping bookmarks. The market’s PGP-signed manifest is the only source of truth. Here’s the sequence:
-
Fetch the manifest
Download the latest manifest from the canary page. It’s a plaintext file with a PGP signature block.
-
Verify the signature
Use
gpg --verify manifest.txt.asc manifest.txt. The fingerprint should match TorZon’s public key:B8A7 3D4E 5F6C 7A8B 9C0D 1E2F 3A4B 5C6D 7E8F 9A0B. -
Cross-check onions
Compare the onions in the manifest with the ones in your bookmarks. If an onion isn’t in the manifest, it’s not TorZon.
-
Update bookmarks
Replace old bookmarks with the new endpoints. Use a password manager—don’t rely on memory.
-
Test the new endpoint
Load the new onion in a fresh Tor Browser session. Check the manifest timestamp in the footer—it should match the one you verified.
Never rotate mirrors while logged in. Log out, clear cookies, then log back in on the new endpoint. TorZon’s session cookies are scoped to the onion address—reusing them across endpoints leaks your session.
Why Rotation Matters
TorZon Market’s mirror rotation isn’t just ops hygiene. It’s a defense against two classes of attacks:
- Onion service enumeration. The Tor Project documents that v3 onions are harder to enumerate than v2, but not impossible. Rotating endpoints forces attackers to re-enumerate the network.
- Traffic confirmation. If an attacker controls your guard node and the exit node, they can correlate traffic. Rotating onions changes the circuit path, breaking the correlation.
TorZon’s walletless architecture reduces the risk of funds being stolen during a rotation, but session hijacking is still possible. That’s why the logout-clear-login sequence matters.
What Doesn’t Change
The new endpoints serve the same frontend, backend, and API as the old ones. That means:
- Direct Payment Mode
- Still available. Generate an invoice, pay it directly with XMR or BTC, no internal wallet needed.
- Stealth Mode
- Still toggles all images to a dark gray placeholder. Useful in public spaces.
- PGP 2FA
- Still mandatory for withdrawals and sensitive actions. The public key hasn’t changed.
- Currency Display
- Still supports 14 fiat currencies. The conversion rates update every 5 minutes from an off-chain source.
The only thing that changes is the onion address. Everything else is a drop-in replacement.
FAQ
How often does TorZon rotate mirrors?
No fixed schedule. The ops team rotates mirrors when they detect enumeration attempts or when a mirror goes dark. The manifest timestamp is the only reliable signal.
What happens if I use an old mirror?
You’ll get a 502 Bad Gateway or a timeout. TorZon doesn’t redirect old onions—they’re simply dropped from the rotation.
Can I verify the manifest offline?
Yes. Download the manifest and signature, then verify with gpg --verify. You don’t need to be online to check the PGP signature.
Does TorZon support .i2p addresses?
No. TorZon is Tor-only. The market’s architecture relies on Tor’s hidden service protocol, not I2P’s.
What’s the uptime guarantee?
None. TorZon doesn’t offer SLAs. The status page shows real-time uptime, but it’s not a guarantee.
Comments
No comments yet — be the first.