Knowledge Base

Verification is mandatory for OpSec.

1. Import the official MarsMarket PGP public key into your keychain (GPG/Kleopatra).
2. On the market login page, locate the PGP-signed message.
3. Verify the signature matches the public key.

WARNING: Never enter credentials on a site that fails PGP verification. Phishing sites will replicate the visual interface perfectly but cannot forge the cryptographic signature.

Standard browsers (Chrome, Firefox, Safari) leak IP addresses, canvas fingerprints, and location data. The Tor Browser routes traffic through three encrypted relays (Entry, Middle, Exit), rendering your physical location untraceable. .onion domains are exclusively resolvable via the Tor network protocol.

Bitcoin (BTC) operates on a transparent public ledger. Chain analysis firms can trace BTC from KYC exchanges directly to market wallets. Monero (XMR) is private by default. It utilizes Ring Signatures, Stealth Addresses, and RingCT to completely obfuscate the sender, receiver, and transaction amount. Using XMR is the single most effective step for financial anonymity.

MarsMarket utilizes a localized Multi-Signature Escrow. Funds are held in a neutral state upon purchase.

• Step 1: Buyer deposits funds into Escrow.
• Step 2: Vendor ships the order.
• Step 3: Buyer finalizes upon receipt, releasing funds.

In the event of a dispute, a moderator intervenes. Funds are never held directly by the vendor until finalization.

To prevent address reuse clustering (a common heuristic for deanonymization), MarsMarket generates a unique, disposable deposit address for every single transaction. Once the transaction is detected, the address is discarded. Never reuse a deposit address; subsequent funds sent to an old address will be lost.

Guardian is our proprietary machine learning model that monitors vendor heuristics. It analyzes shipping times, dispute ratios, and pricing anomalies (e.g., exit scam indicators like 50% off sales). If the AI detects a high-risk pattern, it automatically freezes vendor withdrawals and alerts staff for manual audit, protecting buyer funds proactively.

JavaScript introduces significant attack vectors, including XSS (Cross-Site Scripting) and browser fingerprinting, which can potentially reveal a user's real IP address. By enforcing a NO-JS policy, we eliminate client-side execution risks. The site functions purely on server-side rendering (PHP/HTML/CSS) to ensure maximum anonymity.

The Tor network is subject to latency and DDoS attacks. If a mirror is unresponsive: 1. Refresh your Tor Circuit (Ctrl+Shift+L). 2. Check the 'Mirrors' page on this site for alternative entry nodes. 3. Consult the official Canary posted on Dread or major forums to confirm system status. Our decentralized infrastructure ensures uptime redundancy.

Yes. We require only a username, password, and PIN (for withdrawals). We strictly do not collect email addresses, phone numbers, or any personally identifiable information (PII). We strongly recommend adding a PGP Public Key to your profile immediately after registration to enable Two-Factor Authentication (2FA).