/d/CafeDread

N/A subscribers

N/A


So, you want to make your own SUCCESSFUL darknet marketplace...

by /u/Giffie · 0 votes · 2024-04-28 13:01:00

I've been around on the darknet for a while, with lots of market coming and going.
I see a lot of people asking how to create their own market, without them having any kind of coding/opsec/marketing knowledge.

So, that's why I created this checklist, for people who are interested in creating a dnm.
This checklist is not meant to discourage you, but rather let you know it is not just creating a website and expecting it to make thousands of dollars every week.

I have made my own market (/d/AtlasMarket), it took me almost 2 years to build the market.
So I do have some experience in this field.

Planning


Before doing anything, you need to think about what you want to achieve.
Branding is very important. Come up with a good name, image.
Because there is a chance there was already a market with the name you are thinking of.
So do your research first.

Development


First of all, don't think you can do this all by yourself, like I did.
You will be working years on it, trying to make everything perfect. Hire a team, or work with people you know, who have a good amount of coding knowledge and know how to keep their mouth shut.

Secondly, you need to decide how to build your market.
Keep in mind, no Javascript is ever used on markets, because it exposes your users' anonymity and security.

So, a hard pass for all javascript frameworks like React, Nextjs, Angular and such.

It's best to program the market using a compiled language like Go, Rust, or C (If you are really crazy)
This is good because, even if LE would break in to the servers, they can't do shit, because it is just compiled and they can't see any source.
This method is difficult for most people, and does require a lot of knowledge.

Maybe a better option in terms of developer experience, would be something like PHP/Laravel.
Laravel is an amazing web framework and has a lot of tools like Authentication, Cron jobs, And more out of the box.
This is probably the best framework for building darknet markets (in my opinion)

You would also need to learn following:
- Relational databases (I recommend MySQL, because it is a proven battle-tested database) (This would be used to store all user, order, product info)
- Learning how to scale your database is a must, otherwise your market will crash if it gets popular (Use foreign keys, max chars, sharding)
- Monero daemon (If you want to accept Monero payments for your DNM)
- Bitcoin daemon (If you want to accept Bitcoin payments for your DNM)
- CSS/Tailwind (Tailwind is a CSS library which helps you build amazing interfaces, no matter how functional/good your dnm is, if it looks shit, people will avoid)
- Cron jobs (Tasks that run on a predefined time on a server. Ex: Checking payment status of an order very 5 minutes)
- PGP encryption (It is important to integrate PGP into your dnm, if you use PHP/Laravel you can use php-gnupg)
- Source control, very important to keep track of changes, especially if working in a team (Do not trust Github or any cloud providers, buy a VPS from an offshore, monero & tor friendly hosting provider (more on that below) you can host your own git repo from there)
- Learn API's, to fetch crypto prices, there are some good free services out there
- Learn how to cache data, to decrease your database reads

Production


- Minimize page loading speeds (Bundle your CSS and use a spritesheet to minimize the amount of requests being sent to your server, thanks to /u/Paris for this one)
- USE NGINX/OPENRESTY (Do not use any other webserver)
- If you are really getting big, you should integrate /d/Endgame ddos filter. This firewall is also used by /d/Dread, /d/AtlasMarket and many others
- Buy enough servers from reliable providers, full list here: kycnot[dot]me and /post/cedc0f1054d73128e8e2
- Make sure to buy enough servers with enough CPU and RAM, one server will not cut it.
You need one for backend, frontend (Endgame), Database, Monerod, Bitcoind, Git repo
- Make sure to change SSH login ports, disable password login, and NEVER login to your servers without using Torify
- Disable server SSH logs and other logs
- Pay your servers on time! (USING XMR)
- Split your servers under different accounts, so if one would get reported or ceised, no link can be made with the others
- Never use the same password twice!
- Perform regular checks on your server (disk size, network bandwidth, htop)
- Add captchas to your forms, logins, checkouts, to help mitigate bot attacks
- Create a pgp.txt, links.txt file, it is a market standard.

Marketing/Staying alive (the hard part)


- If you want to be able to share your market on Dread, and create your own sub, you should make sure your market is compliant with all rules listed here: /page/marketstandards
- Hire a PR/marketing guy (you won't have enough time urself)
- Program an admin panel for your site, to manage disputes, tickets, messages and more. Use PGP authentication and host it on tor, never share the link with it. (THIS IS A MUST)
- If your market is over 6 months old, CONGRATULATIONS!, you can be announced on /d/marketannouncements
- List your market on Dntrust, tor.fish, and other link directories to gain user attention
- Organize giveaways, referrals, donation campaigns to attract new buyers
- Make sure to have a bug bounty program active
- Organize free vendor waivers for market refugees

Even if you did all of this, it is still not guaranteed you will have success.
There are a lot of markets out there, and some are basically a monopoly. So you also need to have a bit of luck.
If you are lucky, and a large market exits, or gets seized, you could try to take over.


There is probably a lot of items that I missed, so if you think of something that is not listed, comment below.
If you have any questions, you can always DM me for help.

Comments (12)
/u/AutoModerator · N/A votes · 28th April, 2024 - 13:01 · Link

jewvascript* ftfy This comment was posted automatically by a bot. All AutoModerator settings are configured by individual communities. Contact this community's Moderators to have your post approved if you believe this was in error.

/u/Giffie · N/A votes · 28th April, 2024 - 13:02 · Link

exactly

/u/AutoModerator · N/A votes · 28th April, 2024 - 14:14 · Link

jewvascript* ftfy This comment was posted automatically by a bot. All AutoModerator settings are configured by individual communities. Contact this community's Moderators to have your post approved if you believe this was in error.

/u/piezoofc · N/A votes · 28th April, 2024 - 15:19 · Link

amazing guide !

/u/FokkingFire420 · N/A votes · 28th April, 2024 - 13:18 · Link

Nice post but can't ask for upvotes my guy

/u/bravo25 · N/A votes · 28th April, 2024 - 13:52 · Link

I dont know who descored you but no reason for that, /u/FokkingFire42 is right and it is a site wide rule, you can be banned for this.

/u/FokkingFire420 · N/A votes · 28th April, 2024 - 13:57 · Link

[removed]

/u/Giffie · N/A votes · 28th April, 2024 - 14:23 · Link

I see, thanks for letting me know. I edited the post now :)

/u/Zunero · N/A votes · 28th April, 2024 - 13:30 · Link

You forgot to mention the prior experience you must have before even developing a market lmfao And not to mention... an insane amount of funding. Fucking hell the two most important things and you forgot to mention those

/u/Giffie · N/A votes · 28th April, 2024 - 14:22 · Link

You forgot to mention the prior experience you must have before even developing a market lmfao -> Of course, but this post is not made for people that already have prior experience. Everyone has to start somewhere. And yes, maybe I did not mention it that obvious in the text, but you do need a good amount of money to be able to buy ads, keep your servers running, get listed on directories, ...

/u/Zunero · N/A votes · 28th April, 2024 - 14:56 · Link

I mean prior experience to developing and programming. Every market admin has had a prior experience in the DarkNet, or otherwise your market would be null. Successful markets always come after an exit-scam or corruption obligations from investors.

/u/morimega · N/A votes · 28th April, 2024 - 22:07 · Link

How much funding would you really need? let's say you know how to build it yourself, the money would be into marketing it and servers, that you could scale and pay more as you grow. I don't really see a huge upfront cost (besides time), but maybe I'm missing something?

/u/porkypig · N/A votes · 28th April, 2024 - 23:21 · Link

Good talent costs money, exceptional talent costs a ton. figure in US dollars you're looking at about a year salary at about 200 K and that's mid range. until you start turning your profit, all that money comes out of pocket and you want more than one person to develop your site. Any technical business adventure you always hire people they are much smarter than you. You put your confidence into to get it done right the first time and they be able to think through all the scenarios that require really high functioning technically and experienced brain to pull this off and this is not your roommate from college here, talking about employee folks that have at least 5 to 10 years in the industry have the core values regarding what you're trying to do and what the marketplace represents, which is basically a free market.

/u/Zunero · N/A votes · 29th April, 2024 - 15:57 · Link

I've heard ballparks going from 50k for an average startup and some even 100k for successful ones.

/u/Satoshi1312 · N/A votes · 28th April, 2024 - 13:53 · Link

good luck with atlas market! thx for this helpful post and your offer to help.

/u/jackroberts · N/A votes · 28th April, 2024 - 14:32 · Link

- Make sure to buy enough servers with enough CPU and RAM, one server will not cut it. You need one for backend, frontend (Endgame), Database, Monerod, Bitcoind, Git repo This is not a good idea, it's best practice to use as few servers as possible. it's dangerous to spread each service on a server in one part of the globe.

/u/morimega · N/A votes · 29th April, 2024 - 00:34 · Link

What if the one you have most of your "eggs" in is compromised? Wouldn't it be better to spread and isolate everything as much as possible? Why would it be dangerous?

/u/porkypig · N/A votes · 28th April, 2024 - 15:14 · Link

Good list! /u/Giffie There are a couple things on top of my head that are also very important that should be talked about 1. Location. where are you going to host the site? Do you want it? Self-contained another words all services and databases in the same location or do you want to distribute across multiple locations pros and cons of each? Also, if offsite, what's your early sign of compromise? 2. Secure backups. How do you create backups and safely? Send them to an offsite location, in cases of either the host going tit's up or so getting a hold of the physical box that the site is running on. 3. Multipurpose hosting. what is the best way to set up a website that looks totally legit, is on clear net selling I don't know car tires, and have on the back-end and onion market where the bulk of your business will be. 4. Exit strategy. markets don't live on forever could be because the staff retires wants to sell the business or unfortunately gets pinched in some cases. Either way I feel like every site needs and strategy to be able to safely transfer or nuke everything. 5. Contingency plan for example recently is Cypher. it is clear that there's no contingency plan if somebody gets "hit by a bus". If there was the staff would be able to maintain the website so as users can go on doing business or you safely put on things for on hold for a while also making sure that any funds due are not held up and released. 6. "Oh Shit" leaver. This is slightly different than the exit strategy in that this is a technical solution that everybody agrees with. I have said this on many of posts in my home looking the best way to have a oh shit lever to create basically a deadman switch. that switch can be powered by the bios and start to execute as soon as time is passed if the administrators or staff of the website, do not check in on the prescribed timetable. -- Checking in could be a simple text message phone call keystroke ..whatever. and it could be a simple as just making the hard drive is not readable or self-destruct scrambling all data and so on. Something like this is less scary when you were able to have a good secure, offside back up like I don't know a computer sitting in your second cousin's grandmother's basement. Would be great to hear your feedback on these topics or if anybody else wants to chime in here.

/u/TheInfoMerchant · N/A votes · 28th April, 2024 - 21:15 · Link

Great additions

/u/mcDoogle · N/A votes · 28th April, 2024 - 16:22 · Link

TLDR, you couldn't. I'm almost done. /u/Giffie 10X web dev could do in 1 day.

/u/IwantToKillMyselfLOL · N/A votes · 28th April, 2024 - 19:02 · Link

Fuck this ima give it a go

/u/TheInfoMerchant · N/A votes · 28th April, 2024 - 21:16 · Link

Fantastic insights. Thanks for sharing this.

/u/miner21 · N/A votes · 29th April, 2024 - 05:59 · Link

Marketing and vendor loading are huge. If you can get people on there selling product, as well as letting a potential customer base know you have a new market, you are dead in the water. Many markets are clunky when you first start but can be fine tuned as you grow. To grow you need business happening though