Torhoo onion mirror : torhoocc3yugradvhrppml2fin4xob7kgg7uf42s4xk7p6r5vzy62ead.onion

Checkmate Market is now banned from Dread : newmarkets | Torhoo darknet markets

Following this post:
https://torhoo.cc/go.php?u=TDNCdmMzUXZPVEk1TkRKak5UWTRNemN5WW1NME1ESTRNVEk9#

Checkmate market is now banned from Dread.

I have verified that they are loading css and other assets over the clearnet through Google and Cloudflare. Showing an extreme lack of understanding for security and user safety. I didn't dig any further, but I can imagine this is not the worst of it. This requires a complete permanent ban from the platform. While they could very easily solve this, it should never have occurred in the first place, under any circumstances.

There is no place here for this. They can and probably will continue running, but they are not welcome on Dread.

I have no other words, this is absurd.

/u/Ninja Security Expert

3 points

2 weeks ago

I saw the name checkmate market and already knew something was wrong. Glad I could help haha

/u/valor98 Penetrates Markets (Anally)

1 points

2 weeks ago

LMAO you always fuck someone without protection. Jokes aside good shit!

/u/gumball

4 points

2 weeks ago

We in the industry call this a retards gambit.

/u/HugBunter 📢 A

2 points

2 weeks ago

Haha!

/u/Ratchet_Man 🍼

1 points

2 weeks ago

I don't recall having learned that opening, can you teach it?

/u/bluesh1rt

1 points

2 weeks ago

This is the way!

/u/MikeG69

2 points

2 weeks ago

Some people should not be allowed on the internet, I swear.

/u/diaperspray P

2 points

2 weeks ago

Every fucking DNM operator should know how to or should have someone that knows how to Pentest their site.

ALL DNM's need a cat like /u/HugBunter on their team.

/u/Argo Argo Market

1 points

2 weeks ago*

Stupidity comes at a price looks like they don't know how much running a market risks.

/u/conceptmagmax123

1 points

2 weeks ago

you are on point!

/u/valor98 Penetrates Markets (Anally)

1 points

2 weeks ago

Yay! :)

/u/IDontSmokeMeth

1 points

2 weeks ago

Why are they so desperate to start a market if it is insecure? They are lucky you are doing free pentesting instead of LE and then being arrested.

/u/HugBunter 📢 A

1 points

2 weeks ago

I don't have time to pentest markets anymore, this is something that /u/Ninja noticed.

/u/IDontSmokeMeth

1 points

2 weeks ago

Then don't! If they want security then they should:
1. Know what they are doing
2. Hire a pentester, or expect to be busted by LE

They shouldn't depend on you to look out for them for free,

/u/valor98 Penetrates Markets (Anally)

1 points

2 weeks ago

They are already banned from posting in /d/newmarkets and now they are globally banned 😂

/u/NotImportantBro

1 points

2 weeks ago

Good shit bro thank you for keeping the community safe

/u/Beelzebub

1 points

2 weeks ago

Where am I going to get my condoms?

/u/DonatonCaprion

1 points

2 weeks ago

Let's go!

Steve walks warily down the street
With the brim pulled way down low
Ain't no sound but the sound of his feet
Machine guns ready to go

Are you ready? Hey, are you ready for this?
Are you hanging on the edge of your seat?
Out of the doorway, the bullets rip
To the sound of the beat, yeah

Another one bites the dust
Another one bites the dust
And another one gone, and another one gone
Another one bites the dust (yeah)
Hey, I'm gonna get you, too
Another one bites the dust

How do you think I'm gonna get along
Without you, when you're gone?
You took me for everything that I had
And kicked me out on my own

Are you happy, are you satisfied?
How long can you stand the heat?
Out of the doorway, the bullets rip
To the sound of the beat, look out

Another one bites the dust
Another one bites the dust
And another one gone, and another one gone
Another one bites the dust
Hey, I'm gonna get you too
Another one bites the dust

Hey!

Oh, take it
Bite the dust
Bite the dust, hey

Hey
Another one bites the dust
Another one bites the dust, ow!
Another one bites the dust, hey, hey
Another one bites the dust, hey
Ooh, shout!

There are plenty of ways that you can hurt a man
And bring him to the ground
You can beat him, you can cheat him, you can treat him bad
And leave him when he's down, yeah

But I'm ready, yes I'm ready for you
I'm standing on my own two feet
Out of the doorway, the bullets rip
Repeating to the sound of the beat, oh yeah

Another one bites the dust
Another one bites the dust
And another one gone, and another one gone
Another one bites the dust, yeah
Hey, I'm gonna get you too
Another one bites the dust

Shoot out
Ay-yeah
Alright

/u/miner21 P

1 points

2 weeks ago

Thanks for looking out for us hugbunter!

/u/rmrf P

1 points

2 weeks ago

Vibe coded DNM .

/u/valor98 Penetrates Markets (Anally)

1 points

2 weeks ago

Do they even know how to vibe code? or just script kiddies buying some cheap templates.

/u/majorpayne2 🍼

1 points

2 weeks ago

LOL jesus fantastic design, they should make users upload image proof over imgur and videos over youtube while theyre at it

/u/amicursed

1 points

2 weeks ago

at least tell them to contact me i can fix the whole code . or make a one from scratch ...

/u/TorGateway

1 points

2 weeks ago

Well, at this rate, their security is about as tight as a screen door on a submarine!

/u/Battery

1 points

2 weeks ago

I saw the ban coming.

/u/whoisteam

1 points

2 weeks ago

We may be new on Dread, but after extensive reading over the past few months, we feel compelled to share this advisory: by accepting and promoting Bitcoin-accepting markets to the superlist, you are putting users at risk!

This is a serious issue that needs your attention. We have nothing against Dread, but it's essential to acknowledge the potential dangers!

It's time to change your rules and prioritize the safety of your community before it's too late!

/u/Battery

1 points

2 weeks ago

Why don't you say here, you are ddosing all the markets right now? Asking what? 150XMR? this is embarrassing.

/u/whoisteam

1 points

2 weeks ago

We have requested between 100 and 150 XMR from almost every market accepting Bitcoin.

/u/Battery

1 points

2 weeks ago

lol you request 150 xmr for every market accepting bitcoin.....

/u/whoisteam

1 points

2 weeks ago

There are alternatives available: remove Bitcoin from your platforms, halt operations, or settle with a payment.

/u/Battery

1 points

2 weeks ago*

I never seen such an excuse for a blackmail. I will accept that, but excuse yourself why you attacked archetyp?

/u/whoisteam

1 points

2 weeks ago

We attacked him with a financial motive. After we refused a large Bitcoin offer from a mysterious source, he insulted us publicly and acted arrogantly. We warned him and all of you publicly.check our post history.

/u/Battery

1 points

2 weeks ago

we? who we?

/u/UKDistribution

1 points

2 weeks ago

Get into jail free card, Do not collect $200 if you pass go!

/u/valor98 Penetrates Markets (Anally)

1 points

2 weeks ago

Money, money, money
Must be funny
In the rich man's world

/u/Freedom111

1 points

2 weeks ago

Thanks for the info.

It's absolutely unacceptable for a market as exposed as Checkmate to make such a basic mistake as loading assets over the clearnet, especially through CDNs like Google or Cloudflare. That puts everyone at risk, not just themselves.

Even if it's technically easy to fix, the fact that it was implemented this way from the start shows a serious lack of competence or professionalism in the design. In an environment like ours, security can't be an afterthought.

The ban is well-deserved.
Let’s hope this isn’t the start of a comeback for sloppy markets.
/u/HugBunter 🔨👨🏼⚖️

/u/chatnoir P Legendary back again Moderator

1 points

2 weeks ago

I am so proud of our new mod tean.

/u/Project_X Impact Market PR

1 points

1 week ago

Lol, this was pure stupidity.. Imagine accessing a darknet market and ending up in a Google Analytics report.
Also, the guy was super smart for using Cloudflare. Lol, using Cloudflare on Tor is like wearing a ski mask with your full name embroidered on it.

Glad that they are now banned from the platform.

/u/checkmatepromotion

-1 points

2 weeks ago

The post is not correct /u/HugBunter

/u/HugBunter 📢 A

1 points

2 weeks ago

It is. I literally have the site open with the assets loaded over clearnet, right now.

/u/valor98 Penetrates Markets (Anally)

1 points

2 weeks ago

Can you check my dm?

/u/MrBacon420 P Triggering Truth Teller

1 points

2 weeks ago

There's one thing you should know about Hug, and that he doesn't bullshit or post these things without proof in his own hands and eyes.

/u/checkmatepromotion

1 points

2 weeks ago

Admin did pay /u/CodeIsLaw $2000 over 30 days ago to pentest us and he ghosted us.
He intensionally followed the rules to not advertise outside of the market's sub and contacted Newmarkets over 2 months ago explicitly stating he was waiting to get pentested and hasnt had any further communication since.

/u/HugBunter 📢 A

3 points

2 weeks ago

This isn't something that needs to be pentested though... this is complete and utter lack of understanding.

/u/Super_godman

1 points

2 weeks ago

the server shouldnt be able to load in this case the css and or talk to cloudflare or google. The server at the very least should have been cut off from the internet and all traffic ran threw localhost and tor only. At the very least, its a big fuck up.

/u/HugBunter 📢 A

1 points

2 weeks ago

You're actually wrong there. This is just http requests on the client side from the browser, the server didn't send any requests to it.

/u/Super_godman

1 points

2 weeks ago

oh my bad thought your where talking about google fonts for some api of some sort.

/u/Beelzebum 🍼

1 points

2 weeks ago

/u/CodeIsLaw Now scammer? I wouldn't be surprised.

Can you provide the proof?

/u/Battery

1 points

2 weeks ago

No WAY!

/u/CodeIsLaw

1 points

2 weeks ago

Well Hugbunter will have the Private Messages where he apologized for Disappearing for weeks. I never Ghosted them, He just disappeared right after we had our initial conversation, and the initial Private Links he sent me were Onionsite Not Found. I have not looked at the Market other than Registering an Account there.

/u/Beelzebum 🍼

2 points

2 weeks ago

So you took their money before doing anything. You really in need for pennies aren't you?

/u/CodeIsLaw

1 points

2 weeks ago

Says you who was crying about not getting paid from Archetyp lmao, I seen all your Leaked Chat Logs.

/u/Beelzebum 🍼

1 points

2 weeks ago

Archetyp? Are you on crack?

/u/CodeIsLaw

1 points

2 weeks ago

I haven't started Pentesting Checkmate, the Admin went Offline for 2 Weeks afterwards, I had Messaged him on Dread PM.