Glossary of Darknet Terms

Encountering the darknet means encountering a vocabulary built over three decades of cryptography, markets and subculture. This glossary defines the essential terms. Terms link to related articles where available.

A

Agora

A major darknet market (2013–2015) that voluntarily shut down, widely considered one of the most trusted of its era.

AlphaBay

The largest darknet market of its generation (2015–2017), seized by U.S. and Thai authorities; its operator, Alexandre Cazes, died in custody.

Anonymity network

An overlay network designed to hide the identity of its users — Tor, I2P and Freenet are the classic examples.

B

Bitcoin (BTC)

The first cryptocurrency, launched 2009. Pseudonymous rather than anonymous; the original payment layer of darknet markets.

Blockchain

A public, permanent ledger of cryptocurrency transactions. Its transparency powers both trust and forensic tracing.

Bridge

A Tor relay not listed publicly, used to reach the network in countries that block Tor.

Bulletproof hosting

Hosting providers that ignore abuse complaints and law-enforcement takedown requests, commonly used for darknet infrastructure.

C

Carding

The trade in stolen payment-card data and related fraud services, prominent on Russian-language markets such as Hydra.

Circuit

A path through three Tor relays (guard, middle, exit) that carries a user's traffic, rebuilt periodically.

Clove

In I2P's garlic routing, a message bundled with others inside a single encrypted "garlic bulb."

Correlation attack

A traffic-analysis attack linking a user to a destination by matching entry and exit traffic; the fundamental limit of onion routing.

Cypherpunk

A member of the 1990s movement advocating mass use of cryptography for privacy; intellectual founders of the darknet.

D

Darknet

An overlay network (or the ecosystem of services on it) that anonymizes communication by design. See also: deep web vs darknet.

Deep web

Internet content not indexed by search engines — inboxes, databases, paywalls. Not the same as the darknet.

Dread Pirate Roberts

The pseudonym of Silk Road's operator, Ross Ulbricht, sentenced to life imprisonment in 2015.

E

Eepsite

A hidden service on the I2P network, analogous to an .onion site on Tor.

Escrow

The market-held custody of payment until a trade is confirmed — the core trust mechanism of darknet commerce.

Exit node

The last relay in a Tor circuit; it connects to the destination website and therefore sees plaintext traffic.

Exit scam

When a market or vendor collects users' funds and disappears — the most common cause of market collapse.

F

Freenet

A peer-to-peer, censorship-resistant data store, conceived by Ian Clarke in 1997; the oldest surviving darknet.

Freesite

A static website published inside Freenet, stored as distributed data blocks rather than on a server.

Frost

A communication/forum system running on Freenet.

G

Garlic routing

I2P's routing method: multiple messages bundled into one encrypted "bulb," improving batching and traffic-analysis resistance.

Guard node (entry)

The first relay of a Tor circuit; the only node that sees the user's IP address.

H

Hidden service

A service (site, mail, etc.) reachable only through an anonymity network, with its host's location concealed. See hidden services.

Honeypot

A decoy site or service run by researchers or law enforcement to capture visitors' credentials or identities.

Hydra

The largest darknet market in history (2015–2022), Russian-language, seized by German authorities; estimated $5B+ in volume.

I

I2P

The Invisible Internet Project — an anonymity network using garlic routing, optimized for internal hidden services.

Introduction point

A Tor node through which a hidden service announces itself to the network during connection setup.

M

Market

An anonymous online marketplace operating as a hidden service; see how markets work.

Middle node

The middle relay of a Tor circuit; sees neither the user's IP nor the destination.

Mixer / tumbler

A service that pools and redistributes cryptocurrency to break the link between sender and recipient.

Monero (XMR)

A privacy cryptocurrency using ring signatures and stealth addresses; the modern settlement currency of the darknet.

Multi-signature (multisig)

Escrow requiring signatures from two of three parties (buyer, vendor, market), protecting funds from a market exit scam.

N

Node / relay

A participant computer forwarding traffic in an anonymity network.

O

.onion

A cryptographic address for a Tor hidden service — a hash of the service's public key, typically 56 characters in v3 format.

Onion routing

Layered encryption and relay forwarding that hides the path between sender and receiver; see Tor & onion routing.

Opennet

Freenet's easier mode, connecting to random peers; contrast with darknet mode.

OPSEC

Operational security — practices that minimize information leakage and link your real identity to your activity.

Overlay network

A logical network built on top of the physical Internet with its own addressing and routing; the basis of all darknets.

P

PGP / GPG

Public-key encryption software used on the darknet to verify identities and encrypt messages and orders.

Phishing

Fake sites or messages designed to steal credentials; on the darknet, "clone" sites impersonate real markets.

Plausible deniability

The property that a network participant cannot be proven to possess specific content, as in Freenet's distributed storage.

R

Relay

See node.

Remailer

An early anonymous-email service that stripped sender identities; direct ancestor of modern anonymity networks.

Rendezvous point

A Tor node that bridges a hidden service and its visitor using a one-time meeting code.

Ring signature

A cryptographic signature mixed with decoy signatures; used by Monero to hide the actual spender.

S

Silk Road

The first major darknet market (2011–2013), launched by Ross Ulbricht; invented escrow and reputation for anonymous commerce.

Surface web

The publicly indexed portion of the Internet — what ordinary search engines find.

Stealth address

A one-time receiving address that hides who is being paid; used by privacy cryptocurrencies like Monero.

T

Takedown

A coordinated law-enforcement operation that seizes or dismantles a market or hidden service.

Tor

"The Onion Router" — the most-used anonymity network; see Tor & onion routing.

Tor Browser

The pre-configured Firefox-based browser that routes all traffic through Tor and resists fingerprinting.

Tumbler

See mixer.

Tunnel

In I2P, a unidirectional encrypted path through several peers; inbound and outbound tunnels are separate.

U

Ulbricht, Ross

Creator of Silk Road; convicted in 2015 and sentenced to life imprisonment — the most famous darknet prosecution.

V

Vendor

A seller on a darknet market, identified by a username and PGP key and rated by buyers.

W

Wash trading

Vendors buying from themselves through fake accounts to inflate sales and reputation numbers.

Whack-a-mole

The recurring pattern in which a fallen market is replaced by a new one, keeping total darknet commerce stable.