FIELD MANUAL FM-A-001SUBJECT: ANUBIS MARKETCLASSIFICATION: OPSEC

Anubis Field Manual

Section: 00Operational reference
CLASSIFIED   CLEARED FOR USE

00 · Distribution Notice

Auth. Field Operator

This is a single-subject field manual. The subject is Anubis Market. The contents are operational, not editorial: where to access the platform, how to verify what you have, what to do when something looks wrong.

The manual is a living document. Sections marked EXHIBIT are operational artefacts (mirror tables, fingerprints, latency measurements) and update on a 10-minute cycle from the prober. Sections marked § NN are reference text and revise on review.

Section [II] Subject Profile is the canonical reference for Anubis Market itself. Everything downstream of it is interpretation.

I · Operational Snapshot

Telemetry · live
99.42%Uptime
4.7/5Rating
1,860Vendors
$612K24h vol
Mirrors
BTC+XMRCoins

Three concurrent v3 onion addresses. Prober-validated on the most recent 10-minute cycle. Copy from the table; do not retype.

RoleOnion addressLat 
Primaryanubisq6kqiq5ttmrrnj3pyxssmnaxurl76flaegbtzbcwtes3vomiid.onion142 ms
Backup Aanubisraftr2f2ekuml5nl453aozlgsa54gyxyeci2p2h6unsc57qqyd.onion178 ms
Backup Banubisgpdzwmwlo42mr7g3n75lfusb7uolh7y63ysubvdp6hrezduuad.onion214 ms
! Threat advisoryThe only addresses you should paste into Tor Browser are those above. Phishing operators register one-character-off v3 onions to harvest credentials. Copy from this manual, never retype. If the URL in your browser bar does not match an entry above, abort and return to this manual.

II · Subject Background

Reference text

Anubis Market operates on the post-Hydra darknet-market model. Three structural traits define the platform: Monero-default settlement (new accounts route to XMR; Bitcoin is supported for legacy migration only), 2-of-3 multisignature escrow as the default contract for new vendor accounts, and signed mirror rotation where the operator publishes roster changes on a multi-hour cadence. Each is operationally significant; together they distinguish Anubis from the single-signature, BTC-default, single-mirror peers it has displaced.

The Monero default is not ideological. Bitcoin’s transaction graph is fully public and has been ingested, indexed, and clustered by every commercial blockchain analytics firm currently operating; Monero’s transaction graph is, in the strict sense, not public at all. The asymmetry matters operationally: a Bitcoin deposit can in principle be retrospectively linked to your funding KYC exchange months or years later. A Monero deposit cannot.

The multisig posture matters for a different reason. The 2-of-3 contract distributes the funding key across buyer, vendor, and platform. A platform attempting an exit-scam under multisig would have to convince a majority of vendors to actively co-sign their own losses — which has not happened in the post-Hydra era and would be visible on-chain within minutes of the attempt.

What this manual does not cover

Vendor selection, individual product availability, current pricing, dispute outcomes on individual orders. The manual is operational reference for accessing Anubis Market itself; on-platform decisions are out of scope. The dispute panel SLA is in [VII]; vendor program structure is in [VI].

III · Access Protocol

Six-step flow
  1. Acquire Tor Browser. Download from torproject.org directly — not from a third-party mirror. Verify the installer’s signature against the Tor Project’s published key before running it.
  2. Set the security slider to Safest. Click the shield icon top-right. Standard mode allows JavaScript and remote fonts; Safest disables both. Anubis Market degrades cleanly without JavaScript on its storefront pages.
  3. Bookmark this manual. On the clearnet, not the onion address you intend to visit. The directory rotates onion addresses as operators rotate them; a bookmarked onion will eventually fall out of rotation, while a bookmarked manual stays current.
  4. Copy the onion address. From the mirror roster in [Exhibit A] above using the copy button. Do not retype. The single most common phishing-vector at this stage is a typo on a 56-character v3 onion.
  5. Paste and load. Paste into Tor Browser’s address bar. Wait for the page to load. If a Cloudflare-style or platform-native challenge page appears, complete it; some Tor circuits hit the challenge harder than others, “New Tor Circuit for this Site” in the menu rotates without restarting the browser.
  6. Verify before login. On the Anubis Market login page, double-check the URL one last time against the [Exhibit A] roster before entering credentials. If anything looks off — an extra character, a typo, an unexpected redirect — abort and return to step 4.

IV · Threat Model

Phishing

The dominant threat against Anubis Market users is phishing — cloned storefronts on near-identical onion addresses harvesting credentials from users who arrive via mistyped links or third-party Telegram pins.

The clones are pixel-perfect by construction. Phishing operators clone the visual layout of a login page in an afternoon and register a one-character-off v3 onion in a few hours. The defence is simple in form, demanding in habit: copy from a verified directory like this manual; never retype an onion by hand; verify the URL one last time before submitting credentials.

Common patterns observed in the field: typo-squat onions one or two characters from a legitimate address; lookalike Telegram channels pushing addresses; Discord pins from compromised accounts. The defence in all three cases is the same.

Redacted: known clone patterns

Specific clone onions are not republished here — doing so amplifies their reach. Examples of pattern: anubisXXXXXXXXXXXXXXXXXXXXXXXXXXX, anubisYYYYYYYYYYYYYYYYYYYYYYYYY. The class of mimicry rather than the specific instance is the operationally useful signal.

V · Section Index

Navigation
II · Subject

Anubis Market profile

Mirror table, fingerprints, vendor count, volume.

II.A · Reference

Anubis Market link

Verified onion addresses, prober-checked.

II.B · Reference

Production triad

Mirror roles, guard pools, fail-over patterns.

III.A · Escrow

2-of-3 multisig

How the multisig escrow works in practice.

III.B · Currency

Monero settlement

Why XMR is the default for new accounts.

IV.A · Vendors

Vendor program

Vetting, reputation, dispute outcomes.

IV.B · Disputes

Dispute panel

Third multisig signer arbitration.

IV.C · Fees

Fees and pricing

Vendor commission, listing fees, buyer cost.

V.A · OpSec

2FA login

Two-factor login on Anubis Market.

VI · Protocol

Access walkthrough

Six-step Tor flow to a verified login.

II.C · Reference

Working link

What “working” means operationally.

II.D · Reference

Onion address

The verified production list.

VII · Threats

Phishing reference

Clone patterns, defence habits.

VI.A · Tor

Tor Browser setup

Right configuration before you start.