The Mars Market link: the verified address and how to check it

The verified Mars link on this page

The address at the top of this page is checked before it is published. It has to appear, all 56 characters, on the newest mirror list signed by the key behind the January 2025 list — the key settled in which Mars signing key is real — and the signature has to verify as good. The fingerprint on the key is compared with the one shown inside the market and in Mars's announcements on Dread. It was last checked by admin on 6 November 2026, and Mars was answering on it.

It is printed as plain text, not as a clickable link, on purpose. Nothing on this page opens an onion address for you: you copy the address into Tor Browser yourself, and the habit of taking it from a page you have checked — rather than clicking whatever a search result, a comment or a private message offers — is the habit that keeps you off the lookalike sites. A clickable link also hides its target behind anchor text; plain text cannot be swapped for a different address without the change being visible on the page.

MarsDNM is an independent, educational site. We are not Mars Market, not its staff, and in no way connected to the market; we sell nothing and promote nothing. We publish the verified address for one reason: fake Mars links are the main way people lose accounts and coins around this market, and a page that shows the real address together with the method to check it is the cheapest defence there is. What you do with this information is your own responsibility, and buying controlled drugs is a crime almost everywhere.

Backup Mars Market mirrors

When the main address above is slow, down, or refuses to load, the same signed list carries backup mirrors: doors into the same market, the same account, the same order history. These two were on the list we verified on 6 November 2026, and both were answering:

Two rules keep the backups worth having. They are checked against the same signed message as the primary, not assumed from it: a backup that is not on the newest signed list is dead to you, whatever this table said last week. And if the primary and both backups fail at once, that is the moment to check whether Mars itself is down — not to hunt for a "new" Mars link in comments and private messages, where the fakes are waiting.

The three kinds of Mars address in circulation

Almost every Mars link or Tor URL you will find belongs to one of three groups. Knowing which one you are holding settles most of the question before you open Tor Browser.

Why different sites show different Mars links

Most link pages copy each other, and they copied at different times. A page last touched in 2025 shows the January list and nothing newer. A page updated this autumn may show the October addresses, sometimes without the signed message that makes them worth anything. And some pages exist only to rank for "Mars market link" and hand out the lookalike set, because a reader who arrives from a search engine and logs in straight away is the easiest victim there is.

The second key is what makes the lookalikes convincing. A phishing operator who publishes fake addresses and also a key that "verifies" them gives the reader a signature check that passes. The check works perfectly; it just proves the fake list came from the fake key. That is why the question of which key is real comes before any check of an address.

How many mirrors Mars runs, and the one account behind them

The January 2025 list has five mirrors, and the October addresses were added to the set rather than starting a new market. Every genuine mirror is a door into the same Mars: the same username, password, PGP key, order history and messages, wherever you log in. You never need to register again because one mirror is slow.

That gives you a quick test. A "Mars" site that doesn't know your username, accepts any password, or drops you into an empty account with no orders is not Mars, whatever its address starts with. Be careful with the reverse, though: a site that shows your real account can still be a relay sitting between you and Mars, which is covered further down.

Which Mars signing key is real

Settle this once and the rest of the process is mechanical. In order of strength:

1. The key you saved from the real market. If you saved Mars's public key on an earlier visit to an address you had already checked, that key is your reference, and anything that disagrees with it is the problem.
2. A key change signed by the old key. Markets do replace keys, and a genuine replacement is announced in a message signed by the key it replaces. A "new Mars key" that arrives with no signature from the old one is not a replacement; it is a second key.
3. The key behind the January 2025 list. It has signed Mars's mirror lists since the market opened. A key that appeared later and has only ever signed a set of addresses the older key never signed is the one to distrust.
4. The same fingerprint in Mars's own places. The fingerprint shown inside the market and the one in Mars's announcements on Dread should be identical, all 40 characters of it. Dread itself moved on 7 October 2026, so do this on Dread's new address, not on a bookmark from before that date.

To see a fingerprint, import the key and run gpg --fingerprint, or open the key's details in Kleopatra. Compare every character, in groups of four. Never take the key from the same page that gave you the address: whoever wrote one can write the other.

Checking a Mars mirror against the Mars key

With the right key imported, checking an address goes like this. The general method, with what each result means, is in our full guide on how to verify an onion link; this is the Mars version.

1. Get the signed mirror message from Mars itself, inside the market or in a Mars announcement on Dread. It is a block of text that starts with -----BEGIN PGP SIGNED MESSAGE----- and ends with the signature block. Copy all of it, including those lines; a missing dash or line break turns a good signature into a bad one.
2. Verify it. In Kleopatra, paste it into the notepad and choose Decrypt/Verify. With gpg, save it as mars-mirrors.asc and run gpg --verify mars-mirrors.asc. You want "Good signature" and the fingerprint you settled on above. "BAD signature" means the text was changed after signing, even by one character, and the list is worthless.
3. Read the signing date. gpg prints it on the "Signature made" line. When two lists signed by the same key disagree, the newer one is current.
4. Match the whole address. Paste your address into the editor's search box and search the verified message for it. Eyes skim the middle of a 56-character string, and the middle is where a lookalike differs.
5. Bookmark it in Tor Browser, and check the bookmark again against the newest signed list whenever Mars announces a change. A bookmark records where you went, not whether that address is still Mars's.

If PGP itself is new to you, our beginner's guide to PGP covers importing a key and the Kleopatra screens before you get here.

How fake Mars links copy the "mars" prefix

Nobody chooses an onion address. It is computed from a key, as the Tor specification for onion address encoding sets out, so a faker generates keys until one produces the opening they want, and each extra character they want to match multiplies the work by 32. A home computer finds an address starting with "mars" almost instantly, and one matching the first seven or eight characters of a real Mars mirror in hours or days. Matching all 56 cannot be done.

So every fake Mars link starts with "mars", and the better ones copy a real mirror's opening well past that. The end looks right too, since every current onion address ends in "d". A check of "the first few and the last few characters" is exactly the check the fakes are built to pass; how to compare the middle instead is in our guide on why the first and last characters of an onion address prove nothing.

When a genuine old address turns hostile

October 2026 added a case that full-address matching cannot catch: a real address answered by someone else. A flaw in GoBalance, a tool some large onion services use to spread load across servers, exposed the private keys behind their addresses, and holding that key is all it takes to answer at the address. Dread lost both of its old addresses to takeover between 5 and 7 October and moved to a new one, as our page on the Dread move describes.

For Mars, the lesson is the signing date. An address that was genuine in January 2025 matches every character it ever had, and it can still be serving someone else's copy today. The newest signed list is the authority, not your bookmark and not the list you checked last year. An address Mars has retired in a signed message is hostile from that day, however familiar it looks, and so is every address of a market that has closed, as our page on darknet market exit scams explains.

Is Mars Market down, or is it the mirror?

Mars was up on 6 November 2026. When it will not load for you, it is almost always one mirror or your circuit rather than the market. Work through it in this order:

1. Try another address from the same signed list. Mirrors go down one at a time, which is why there are several.
2. If you reach a queue or a captcha, wait it out. That is protection against floods of traffic, and refreshing usually just restarts the wait.
3. Get a new route: in Tor Browser, open the menu and choose "New Tor circuit for this site", or restart the browser if every onion site is slow.
4. Look for a signed Mars announcement on Dread. A planned outage or a mirror change will be there.

What the real Mars login page can do that a copy cannot

Less than people hope. A copy can reproduce the layout, the captcha and the logo exactly. A relay copy can even show your real account and pass Mars's PGP login challenge through to you, because it is forwarding the real page; you decrypt the challenge, and the relay uses the code you paste.

What a copy cannot do is sit at a genuine Mars address that Mars still controls. That is why the address check above is the whole defence and the login page is not. Two habits help at the margins: read the decrypted challenge text in full, and if it names an address, compare that with your address bar; and treat any login page that asks for your PGP private key, a "verification payment" or a recovery phrase as fake on the spot, because Mars asks for none of these.

If you typed your Mars password into a fake page

Act from a verified mirror, and in this order, because an attacker who logged in as you will change the things that let you take the account back.

1. Do not pay anything shown on the fake page. Its payment addresses belong to whoever runs it.
2. Log in through a checked mirror and change your password to one you have never used anywhere.
3. Open your profile and check the PGP key on it is yours. Swapping it is how an attacker locks you out: the next login challenge is encrypted to their key, not yours.
4. Turn on PGP login, and TOTP as well if you use it, if they were off.
5. Read through your messages and open orders for anything you did not do, and raise it with Mars support from the real market.

Coins you paid to the fake page's address are the one loss Mars support cannot touch, because Mars never saw them. The walletless design spares you the rest: there was no balance sitting in the account for the attacker to take. How Mars's escrow works, and when a vendor skips it, is on our overview of Mars Market.

Mars Market link: quick answers

What is the real Mars Market link?

The address at the top of this page, verified against the Mars signing key on 6 November 2026. It is one of several genuine Mars mirrors, and the full check — with the reason you should run it yourself rather than trust our word for it — is in checking a Mars mirror against the Mars key.

Is the Mars Market link on this page safe to use?

Verified means it matched the signed mirror list, character for character, when we checked it — not that any onion address stays safe forever. Mars can retire an address in a signed announcement, and a retired address can be answered by someone else. Re-run the signature check before you trust it, especially if you have not been to Mars for a while.

Why is the Mars link plain text and not clickable?

So that the address you read is the address you open. Anchor text can hide a different target, and nothing on an educational page should be one tap away from opening an onion service. Copy the address into Tor Browser by hand, from this page or from the signed list you verified yourself.

How many Mars Market mirrors are there?

Several at a time, and the set changes when Mars signs a new list — the primary address and two backup mirrors we verified are listed on this page. Every genuine mirror opens the same account: same username, password, PGP key and order history. One address confirmed on the current signed list is worth more than ten that appear on no signed list at all.

The Mars Market link won't load. What now?

It is usually one mirror or your Tor circuit rather than the market: try another address from the same signed list, get a new Tor circuit for the site, then look for a signed Mars announcement on Dread. The full order is in is Mars Market down, or is it the mirror?.