Primary mirror
shadowxbcmg5dog6wnn4ufzosncmv5runr5u6houoj2ta4vtrjoxryqd.onion
Mirrors checked November 7, 2026
ShadowX has been running on the Tor network since March 2024. Two .onion addresses are live right now, both listed below. Before you paste your PGP key or send a single satoshi, run the three checks on this page. They take about four minutes and save you from the most common phishing trap in the darknet space.
Both addresses are active. If one stops responding, use the other. The PGP signature on the ShadowX main page confirms which one is the primary.
shadowxbcmg5dog6wnn4ufzosncmv5runr5u6houoj2ta4vtrjoxryqd.onion
shadowxpm2bm7x357adx3hsolnh4risr65ks47erzjozwcb22vfezgid.onion
Before you go: the ShadowX admin posts a PGP-signed confirmation on the market forum whenever a mirror rotates. If the address you found on a random blog does not match the signature, treat it as a clone.
These are the same steps the ShadowX team recommends in their own forum posts. They work for any darknet market, but here they are specific to ShadowX.
Every official ShadowX mirror announcement comes with a clearsigned message from the admin key (fingerprint ending in 360D76). Open the announcement in the ShadowX forum and verify the signature against the public key posted on the market itself. If the signature fails, the link is a clone no matter how official it looks. Full verification walkthrough.
Real ShadowX .onion addresses start with "shadowx" followed by a 52-character base32 string. If you see a different prefix, a shorter string, or a .com domain pretending to be a mirror, it is not the real thing. The two addresses on this page follow that pattern. What to look for.
Before your first visit, confirm the address on at least one independent directory. UnderDir, dark.contact, and onion.live all list ShadowX with their own verification notes. If all three show the same address and the PGP checks out, you are good to go. More on directories.
Short, practical notes on using ShadowX. Each one covers one specific problem: a dead link, a confusing PGP step, a shipping question, or a scam pattern that keeps showing up in the forums.
Step by step: install Tor, find the right onion address, register with PGP, and make your first purchase without losing coins.
Read →The PGP signature is the only cryptographic proof that a ShadowX address is real. Here is how to check it in under five minutes.
Read →Two of the most active darknet markets in 2026, compared on fees, shipping times, escrow rules, and where each one actually wins.
Read →The right security level, the right add-ons, and the one setting most people get wrong. A 10-minute setup that saves you hours of frustration.
Read →Which coin to use, how the multisig escrow actually works, and the fee structure broken down so you know exactly what you are paying.
Read →The three scam patterns that show up in the forums every month, what the fake pages look like, and the one check that catches all of them.
Read →Pulled from the ShadowX forum, Reddit threads, and the messages this site receives. If your question is not here, the full FAQ page has more.
The two active .onion addresses are listed in the mirrors section above. They rotate occasionally, so always check the latest entry on this page before you type anything in. The last rotation was in September 2026.
Three things: the PGP signature from the admin key, the structure of the onion address (starts with "shadowx" plus 52 base32 characters), and confirmation from at least two independent directories. If any of those three fail, do not enter your PGP key.
Both. All transactions on ShadowX go through a multisig escrow. Your coins are held by the market until you confirm delivery or open a dispute. BTC is the default; XMR is available for users who prefer more privacy on the blockchain.
ShadowX runs two mirrors at the same time. If one goes down, the other stays up. The market team posts an update on the forum within a few hours. This page gets updated the same day. You do not lose your account or your escrow balance when a mirror rotates.
Yes. Registration requires a PGP public key. Generate one for free with GnuPG, Kleopatra, or any online key generator. Upload the public half during sign-up. The private half stays on your machine. If you lose it, you lose access to your account, so store it somewhere safe.
The last-checked date is updated daily. The actual onion addresses change less often, usually only after a security rotation or a DDOS event. When an address changes, this page is updated the same day and the change is noted in the guides section.