Status: Operational (120ms)
DrugHub Vendor Portal, Vetting Criteria & E2EE Rules Manual Processing | PGP Reputation Waivers
http://drughuberjxfrxtlk2cystdz4jvogmc3lsnk5drvwx2nfi63ou2r2kid.onion/
Open Link
  • Home
  • Vendor Operations

DrugHub Marketplace Vendor Application & E2EE Rules

Essential Vending Policies & Requirements

  • Case-by-Case Manual Review: All vendor applications are evaluated directly by administration. No automated vendor approvals.
  • PGP Reputation Bond Waivers: Established merchants with verifiable history from defunct platforms (Archetyp, Abacus, Bohemia) qualify for bond waivers based strictly on matching PGP key signatures.
  • Mandatory Client-Side E2EE: Plaintext transmission of sensitive personal information (including tracking numbers) is strictly prohibited. Violations lead to immediate termination.
  • Two Dedicated Private Mirrors: Approved vendors automatically receive 2 dedicated, isolated .onion mirrors with zero DDoS latency.
  • Employee Sub-Accounts: Delegate order chats and inventory updates to employees without exposing your master PGP private key or financial withdrawal settings.
Table of Contents
  1. 1. Vendor Application & PGP Bond Waiver Protocol
  2. 2. Platform Rules & Prohibited Goods Matrix
  3. 3. Mandatory End-to-End Encryption (E2EE) Protocols
  4. 4. Listing Quick Edit, Keywords & Bulk Pricing Tiers
  5. 5. Private & Custom Listing Architecture
  6. 6. Granular Employee Sub-Account Configuration
  7. 7. Vendor-Controlled Auto-Finalize (AF) Timers (5–45 Days)
  8. 8. DrugHub Reverse-Proxy Encryption Helper (Python & Go)
  9. 9. AutoSweep Offline Payouts & Zero Withdrawal Fees

1. Vendor Application & PGP Bond Waiver Protocol

Following tectonic disruptions across the darknet ecosystem—including the exit of Archetyp and Abacus—DrugHub has absorbed an immense influx of merchants. To safeguard buyers against infiltration by exit scammers while welcoming high-volume, reliable vendors, applications undergo manual vetting.

To apply for merchant status:

  1. Register a standard account using your master merchant OpenPGP public key via the DrugHub Login Portal.
  2. Navigate to the Vendor Application section under account settings.
  3. If you possess established sales history on previous markets, submit signed proof of your reputation. The signature must originate from the exact PGP key used on DrugHub.
  4. Staff checks your key against historical archive scrapes (e.g., /d/Scope archives). If verified, the standard vendor bond is waived.
Staff Notice on Support Tickets: Do not open a customer support ticket asking "How do I become a vendor?" or "Can you give me a discount on bond?" Such tickets are closed without response. Follow the official application tab on the dashboard.
DrugHub Marketplace Vendor Rules, Bond Verification and Moderation Protocol

2. Platform Rules & Prohibited Goods Matrix

DrugHub enforces strict operational standards. Breaches are handled decisively, resulting in listing restrictions, escrow fines, or permanent banishment:

Rule Category Specific Prohibitions & Requirements Penalty for Infraction
Prohibited Goods Weapons, fentanyl/analogues, poisons, non-consensual media, stolen LE/Gov data, fraudulent methods/transfers. Immediate permanent ban, bond forfeiture, escrow frozen.
Off-Market Contacts Posting Telegram, Session, Signal, Jabber, or email in bios, listings, or customer order chats. Account restricted, fined, or permanently banned.
Plaintext PII Transmitting unencrypted customer names, addresses, or carrier tracking numbers. Formal warning on first offense; permanent ban on repeat.
Geopolitical Policy No business to or from Russian Federation or CIS countries; no selling CIS personal/corporate data. Immediate permanent termination.
Keyword Abuse Spamming irrelevant search keywords (e.g., tagging "weed" on a listing for stimulants). Listing shadowbanned and account ranking downgraded.
Unauthorized FE Demanding customers to Finalize Early (FE) without holding approved FE privileges. Escrow privileges revoked and listing frozen.

3. Mandatory End-to-End Encryption (E2EE) Protocols

On DrugHub, plaintext sensitive communications are mathematically impossible by design.

Unlike legacy platforms that implemented server-side "auto-encrypt" scripts (which deceive users into trusting servers that secretly retain plaintext messages in memory), DrugHub enforces genuine client-side End-to-End Encryption:

  • All order chats and customer communications must be encrypted locally using the recipient's OpenPGP public key before transmission.
  • Market servers act strictly as blind cryptographic relays. If DrugHub servers were ever seized by hostile entities, zero plaintext communication logs could be extracted.
  • Quick Replies are provided for generic customer support inquiries (e.g., "Order dispatched via Priority Tracked"), but vendors are strictly prohibited from placing tracking numbers or personal details into unencrypted quick replies.

4. Listing Quick Edit, Keywords & Bulk Pricing Tiers

DrugHub's merchant panel provides streamlined catalog management tools engineered to eliminate operational bottlenecks:

  • Listing Quick Edit: Update stock counts, product pricing, accepted currencies, or active/vacation status instantly without forcing the listing back into the moderation queue.
  • Listing Moderation Queue: New vendor listings and newly created product categories are reviewed by staff for compliance with photography standards (signed timestamped proofs) before going live.
  • Bulk Quantity Pricing: Configure multi-tiered pricing discounts within a single listing. Merchants are strictly discouraged from creating duplicate listings for varying quantities.
  • Accurate Search Keywords: Assign relevant search tags to each product to enhance discoverability in the public catalog without engaging in keyword stuffing.
DrugHub Merchant Dashboard, Multi-Tier Commission and AutoSweep Configuration

5. Private & Custom Listing Architecture

For bespoke orders, wholesale contracts, or negotiated customer settlements, DrugHub features an isolated Custom Listing Engine:

  • Custom listings do not appear in public catalog categories or search results.
  • The system generates a unique private Listing ID. The vendor provides this identifier directly to the designated customer.
  • The buyer enters the ID into their dashboard to open the private checkout portal with custom pricing and tailored escrow terms.

6. Granular Employee Sub-Account Configuration

Enterprise darknet merchants frequently employ teams to handle packaging, fulfillment, and customer inquiries. Historically, delegating work required sharing the master vendor account password and private PGP key, creating disastrous insider theft and blackmail risks.

DrugHub solves this through Role-Based Employee Sub-Accounts:

  • Master accounts create distinct sub-accounts and issue unique login credentials.
  • Assign granular permission scopes: allow an employee to respond to order chats and mark shipments as dispatched while blocking access to financial ledgers, payout addresses, and PGP key settings.
  • Employee actions are logged in an immutable audit ledger visible to the master merchant.

7. Vendor-Controlled Auto-Finalize (AF) Timers (5–45 Days)

Domestic express shipments arrive in 48 hours, while international freight may require three weeks. Rigid market escrow timers force vendors into unnecessary dispute queues.

On DrugHub, vendors configure the Auto-Finalize (AF) Timer between 5 and 45 days per listing based on transit corridors.

If a buyer receives their parcel but fails to finalize the order, the vendor can submit a dispute for Tracked Delivery Release. If tracking proofs confirm successful delivery, dispute moderators release escrow funds promptly.

8. DrugHub Reverse-Proxy Encryption Helper (Python & Go)

To save merchants hours of daily manual decryption across hundreds of incoming customer inquiries, DrugHub developed the DrugHub Encryption Helper.

Rather than introducing vulnerable server-side auto-encryption, the Encryption Helper runs locally on the vendor's workstation as a transparent reverse proxy. It intercepts HTTP chat traffic, decrypts incoming messages with the vendor's local GnuPG keyring, and encrypts outgoing replies with the buyer's public key automatically.

Key Architectural Highlights

  • Python Version: Ultra-compact (~280 lines of code) using standard library modules. Runs out-of-the-box on Tails OS without needing pip dependencies.
  • Go Version: Lightweight standalone binary (~290 lines). Extremely fast, requires zero GnuPG dependencies, and can be compiled locally from source.
  • Temporary Keyring Isolation: Imported customer keys are stored in a volatile RAM keyring, preventing the vendor's primary keyring from accumulating thousands of transient keys.
  • Platform Compatibility: Verified on Tails OS, Whonix, Qubes OS (with and without split-gpg), and Debian.

9. AutoSweep Offline Payouts & Zero Withdrawal Fees

DrugHub's accounting system provides seamless capital management through AutoSweep:

  • Configure an external Monero payout address and set a trigger threshold (e.g., 25 XMR).
  • When cleared escrow balances meet the threshold, a withdrawal is queued automatically.
  • To enforce the Zero Hot-Wallet architecture, AutoSweep withdrawals are settled from offline cold storage within 24 hours.
  • DrugHub covers 100% of outgoing Monero blockchain transaction fees.