você está na clearnet. os endereços listados aqui só abrem dentro da rede tor - baixe o navegador tor aqui »
AlphaBay.Market
PT
última verificação: há 6 min 260 onions monitorados
início / notícias / observatório de mercados
12 agosto 2026 observatório de mercados 4 min de leitura

Sumiu sem uma palavra: um mercado veterano em silêncio

Sometime in the second week of August, a service that had run for years dropped off the Tor network. No farewell message, no defacement, no seizure banner from any law enforcement agency. The onion address simply stopped responding, and it has stayed that way through every sweep since.

Quiet disappearances like this are the most common ending in the hidden service world, and the least reported. There is no press release and no forum meltdown to quote. Just an address that stopped answering, and a question mark where an operator used to be.

The most common ending is silence

People imagine dramatic finales: coordinated raids, takedown announcements with agency logos, or an exit scam caught mid-heist. In practice, most services end the way this one did. The lights go out one night and nobody flips them back on. The research backs this up. A 2026 monitoring study by researchers including Sergio Pastrana and Guillermo Suarez-Tangil found that a large proportion of hidden services vanish shortly after they emerge, describing the network as far smaller, shakier and more duplicated than commonly assumed (TechXplore). Earlier academic work reached similar conclusions, with one six-month tracking effort finding only about 15 percent of onion services stayed operational for the full period. That makes silent exits genuinely hard to interpret from the outside. The same symptom covers several very different causes, and they can look identical for weeks. Analysts at DarkOwl documented exactly this problem when more than 30 percent of known markets went dark within days of each other, leaving even seasoned observers guessing (DarkOwl).
  • Seizure - servers confiscated, though the banner sometimes appears only later.
  • Exit scam - the operator pockets escrowed funds and walks away.
  • Burnout - maintenance, hosting costs and stress simply win.
  • Unannounced shutdown - the project ran its course, no drama intended.

Seizure, scam or burnout?

Each ending leaves different fingerprints. A seizure usually announces itself eventually, even if the first sign is downtime while prosecutors decide how public to be. Exit scams tend to telegraph themselves beforehand: withdrawal delays, staff disputes, sudden rule changes. The pattern played out in real time with Abacus Market in mid-2025. Users reported stalled withdrawals in late June, daily deposits collapsed from roughly $230,000 to about $13,000 within two weeks, and then the entire infrastructure went dark with no banner at all. Blockchain analysts at TRM Labs assessed it as a likely exit scam while carefully noting a covert law enforcement seizure could not be ruled out (TRM Labs, BleepingComputer). Covert seizures are increasingly common, which muddies the water further. Agencies now sometimes leave a market online rather than announce a takedown, letting investigations run while vendors stay unaware. That strategy dates back at least to Operation Bayonet in 2017, when Dutch police quietly ran Hansa Market for weeks after seizing it. A silent disappearance may therefore be the loudest event in the room. The uncomfortable truth is that we may never know which explanation applies here.

Why OFFLINE entries stay listed

Our status checker will keep this service listed with an OFFLINE badge rather than deleting it. That is deliberate policy, not neglect. Onion addresses do return after weeks of downtime, whether because of hosting migrations, extended DDoS attacks or an operator taking an unplanned break. DarkOwl tracked markets in late 2021 that reappeared after months offline, with no announcement either time. A permanent record of who went dark and when is arguably more useful than a tidy list of survivors. Longitudinal data lets researchers distinguish routine churn from something unusual, like a cluster of takedowns in one category. Readers following along via our market watch feed get that same continuity.
A dead address that stays documented tells a story. A deleted one tells nothing.

If it comes back, verify everything

If the service resurfaces under its original address, the badge will flip back automatically and normal monitoring resumes. But if it reappears elsewhere claiming continuity, treat that as a new entity wearing an old name. Mirrors can be cloned, branding can be copied, and phishing pages love an audience already primed by rumors of a comeback. The cryptographic key, not the name, is the only identity that matters here. Check any signing key against archived announcements before trusting a resurrection, and be deeply skeptical of return notices that arrive alongside urgent deposit prompts. Silence ended this service's story once. The second act deserves even more scrutiny than the first.

O que os avisos #StopRansomware revelam sobre a economia do ransomware: pagamentos, setores, afiliados

Os avisos conjuntos #StopRansomware servem também de registro público de como funciona a economia do ransomware: corretores de acesso inicial com valores de 100 a 1 milhão de dólares, afiliados em níveis, contagens regressivas nos sites de vazamento e risco de sanções para quem facilitar um pagamento. O que os documentos realmente dizem — e por que os pagamentos caem mesmo assim.

O roubo ao Crédit Mutuel Arkéa: como 133 milhões de dólares saíram por um prestador de serviços e viraram stablecoins e Monero

Um intruso chegou ao Crédit Mutuel Arkéa através da plataforma de um prestador de serviços e usou a própria conta corporativa do banco para mover cerca de 118 milhões de euros, valor que o banco não confirma. O dinheiro saiu como transferências bancárias comuns, foi levantado em USDC e USDT em três corretoras e em parte acabou em Monero.