signature lab
torverifyverify before you connect
mirrors.json2-of-3sig pending

Verdict · project record

Is the Vortex Onion Link Real? torverify’s 2026 Verified Address Check

Vortex is one of the projects with a signed address of record here. The onion below is the string our source covers. As with any short, catchy name, look-alikes are cheap to make, so read every character rather than trusting the look of a page.

torverify exists to answer one question about Vortex: does this address match torverify’s signed source. torverify does not rank Vortex against other tracked projects, torverify takes no payment from Vortex or anyone else to appear here, and torverify will update this page the moment torverify’s quorum closes — not sooner. That is torverify’s entire scope for Vortex, nothing wider.

?
UNVERIFIED

This string matches the Vortex record torverify holds, but the quorum signature is not live yet — so the verdict stays UNVERIFIED, not LEGIT, until the keys are posted. Confirm the PGP signature by hand in the meantime.

Onion of recordvortexqttelw7m627vd25uhzielmoqbbbep6xn3hoa6re2xiac3tomad.onion
PGP fingerprint0000 0000 0000 0000 0000 0000 0000 0000 0000 0000

source: /mirrors.json · quorum 2-of-3 · live signature pending
The fingerprint is a placeholder until the offline signer keys are published on the PGP page. Until then, treat the address as provisional and confirm by hand.

Not the mod manager, not the optics brand

Vortex is the name of a popular game mod manager, a line of rifle scopes, and a regional internet provider. None of them are meant here. On this page Vortex is the Tor onion service and its address of record. If a result is about downloading mods or buying binoculars, you are on the wrong trail, and no address there should be trusted for this project.

Why torverify names the other Vortexes directly

A reader searching for the market can just as easily land on a page about rifle optics or game mod tools, and a quick skim rarely catches the mismatch. Spelling it out here costs one short paragraph and saves a wrong click.

The one habit that beats a good-looking fake

Phishing pages are often prettier than the real thing, because effort goes into the bait. Design proves nothing. What a clone cannot fake is a signature from a key it does not hold. So the routine stays the same every time: take the address from the signed source, copy it as text, verify the signature, and only then paste it into Tor Browser.

A Vortex verdict answers one question, not several

UNVERIFIED and LEGIT both describe whether the string matches Vortex’s signed key — not how the market behaves once you’re past the front page. torverify has no signal that could rate vendor conduct, and does not attempt to fake one.

Recognizing a cloned Vortex address

Vortex is popular enough to be worth impersonating, which means the address above is not the only thing calling itself Vortex on the open web or inside Tor. The patterns below are what every Vortex clone we have reviewed shares, regardless of how polished the copy looks.

What a genuine Vortex rotation announcement looks like

A legitimate Vortex address change is signed by the outgoing key before the incoming address takes over, published through the same channel this page already tracks, and gives the old address a defined retirement rather than a silent disappearance. It does not arrive first as a forum post, a comment reply, or a message from an account with no prior history — those are exactly the channels a clone operator uses to skip the part of the process that would let anyone verify the claim. If a rotation reaches you through anything other than a signed announcement, treat it as unverified until this page or the Vortex operator's own signed channel reflects it.

The clone surfaces right after a real outage

When the genuine Vortex onion goes quiet for maintenance, a key rotation, or ordinary Tor network churn, that is exactly the window a clone operator times a push of "new Vortex mirror" links into forums and search results. The outage is real; the replacement address being offered almost never is. Treat any such gap as a reason to wait for this page to update, not a reason to go searching.

The address is close, never exact

A Vortex clone banking on a rushed glance will register or generate an onion that shares a visible fragment with the real address — a matching prefix, a similar length, sometimes even a matching first and last few characters. The full string in the record above is written out for exactly this reason: a fragment match tells you nothing, and only a character-by-character comparison against the signed source catches the substitution.

The signature check is missing, faked, or skipped entirely

The single most consistent tell across every Vortex clone: no working PGP verification path, or a key with no chain of custody back to a previously trusted Vortex signature. A visual copy of a page is inexpensive to produce; a signature that actually verifies against an established key is not. That gap is what this page exists to close — confirm the fingerprint on the PGP tool before you trust any Vortex address, including this one.

A Vortex clone spun up right after a takedown rumor

Rumors of a Vortex seizure or exit tend to spike search traffic for the project’s name, and that spike is exactly what a clone operator times a fake “still working” mirror to catch. A rumor alone changes nothing about the signed record above — wait for this page to reflect a real status change rather than acting on an unconfirmed claim.

Vortex mirror history and why torverify keeps re-checking it

torverify does not treat a signed Vortex address as a fact that stays true forever. Onion addresses for an active market like Vortex get re-confirmed against the source of record on a rolling basis, because the whole point of running torverify is that a verdict from months ago is not a verdict you should still be acting on today. When Vortex last rotated its published address, the change showed up here only after our 2-of-3 signature quorum could confirm it — not the moment a forum thread claimed a new link, which is exactly the gap clone operators try to exploit.

Why buyers specifically ask torverify about Vortex

Vortex draws a steady stream of "is this real" questions because it is popular enough that impersonation is worth the effort for a scammer, and because the market itself has no way to broadcast an authoritative answer to someone who has never used it before. torverify exists for exactly that gap: an independent, PGP-anchored check of the Vortex address that does not depend on trusting whichever forum post, ad, or search result a visitor happened to land on first. That is also why this page states plainly what an UNVERIFIED verdict does and does not cover — torverify confirms the address, not the market’s conduct once you are inside it.

What changes on this Vortex page between torverify re-checks

Between re-checks, nothing on this Vortex record should be assumed to have silently changed — the address, fingerprint, and quorum status shown above reflect the last confirmed state, and torverify would rather show a slightly stale confirmed record than a fresher unconfirmed one. If Vortex announces a rotation faster than torverify can re-verify it, treat the announcement as unconfirmed until this page updates, and lean on the general verification routine in how to verify a .onion address in the meantime rather than trusting the announcement on its own.

What a lagging Vortex record would look like

If this page ever falls behind an actual Vortex rotation, the fingerprint and quorum status above will reflect that honestly rather than quietly presenting a stale address as current.

How torverify arrives at a Vortex verdict

The mechanics behind this Vortex verdict are the same mechanics behind every verdict torverify publishes: an address enters our source of record only after two of three independent signers confirm it against Vortex’s own published PGP key, not against a screenshot, a forum claim, or a third-party aggregator’s listing. torverify treats those three inputs as equally untrustworthy on their own, which is precisely why the quorum step exists — a single compromised signer cannot push a bad Vortex address into this record, because it takes agreement from two.

None of that changes what a torverify verdict is not. It is not a review of Vortex as a market, not a guarantee about any vendor operating on it, and not advice about whether to use it at all. It is narrowly an answer to one question — is this the address Vortex actually controls — answered the same rigorous way for Vortex as for every other project torverify covers.

Cross-checking a Vortex claim outside torverify

torverify tells you whether the Vortex address matches the signed source; it says nothing about how you store the fingerprints, passphrases, and addresses you compare it against. A local, open-source vault such as KeePassXC keeps that material off a browser’s built-in password manager, which is a meaningfully weaker place to keep anything tied to a Vortex account. torverify’s job ends at the verdict; what you do with the confirmed address afterward is a separate set of habits worth getting right.

What actually has to happen before Vortex changes here

Two of torverify’s three offline signers have to independently agree before anything above updates. One convincing post on its own is not enough to move this record.

Why Vortex made torverify’s short list

torverify does not track every project that exists on Tor — the list stays deliberately short, and Vortex earned a place on it the same way every other entry did: enough visibility that phishing clones of it are already a real, documented problem, and a PGP key that torverify could cross-confirm through more than one independent channel before publishing anything.

What torverify would need to see to change this Vortex verdict

A change to the Vortex entry above — a rotated address, a status change — only happens after torverify's 2-of-3 offline-signer quorum confirms it, the same bar every other project on this site has to clear. torverify would rather this page lag an actual Vortex change by a day than publish an update sourced from a single unconfirmed announcement.

What this Vortex page does not attempt to answer

This record speaks to one narrow claim: the address above is the one torverify holds on file for Vortex. It is not a review of Vortex as a market, not a claim about escrow reliability, and not advice on whether to use it. For that broader context, torverify's legit markets page explains exactly where that line is drawn, and why torverify stays on this side of it.

What a Vortex address check doesn’t cover

The address above confirms Vortex’s genuine infrastructure and nothing further. What happens after you connect is a separate question entirely.

Escrow and vendor risk are out of scope here

Order reliability, dispute handling, and vendor honesty on Vortex are not things a signature can measure. torverify checks the address; it does not review the marketplace running on top of it.

Read where that boundary is drawn

torverify’s legit darknet markets page lays out exactly what an address verdict does and doesn’t promise about a project like Vortex.

Why torverify ignores forum chatter about Vortex

A Vortex address gets passed around in places torverify neither controls nor trusts by default.

A popular claim is still just a claim

A forum thread full of people agreeing on a Vortex link hasn’t proven anything cryptographically. torverify signs its source with offline keys because volume of agreement is not the same thing as a verifiable signature.

Directory listings inherit the same problem

A Tor directory carrying a Vortex entry among hundreds of others is repeating an unverified submission, nothing more. torverify treats it the same way it treats an anonymous post: a candidate, not a confirmation.

How often the Vortex record gets re-checked

torverify doesn’t sign this entry once and consider it done.

What triggers a Vortex re-check

A specific trigger has to fire: an outage longer than routine Tor churn explains, a rotation claim from more than one channel, or a scheduled pass through torverify’s full tracked list. No trigger means the record above stands as last confirmed.

What doesn’t count as a trigger for Vortex

An unsourced rumor, a screenshot with no signature attached, or a spike in Vortex search volume does not change this record by itself. torverify waits for something it can independently check.

Questions

Is Vortex here related to the Vortex mod app?

No. That is desktop software for games. This page is about a Tor onion service with the same name.

The layout matches Vortex but the address looks new. Trust it?

Not on looks. Check the full string against the signed source and verify the signature. Matching design with a mismatched address is a red flag.

Why show the address as text instead of a link?

So you copy and read it. A plain string forces the one check that a clickable link lets you skip.

Verify it yourself

Do not take our word for it. Confirm the signature on the PGP tool, read the signed source directly, or learn the routine in how to verify a .onion address.