The mirror list
Three public mirrors. Same market, same accounts, same escrow, same order history. What differs between the addresses is which front node serves the market, not what is behind it.
Mirror addresses · 3
same market · no rankingblackops27m32abqvbhnyswgazqawxqbznbzkkkv5sjo7gve2ndpsdad.onionblackops5l63qnwnmlnsfvtlu66md3x3vp3fdtpna42eq7ozujr67hid.onionblackops6kignp3eddmvqcfkjzf6qr6haxbmkypc2xtqlnhuu4ak4dqd.onionCopy one address, paste it into the Tor Browser, and compare the last six characters against what landed in the address bar. If one will not connect, build a new circuit and take the next. Why an onion refuses to load.
How to read an address
A v3 onion is 56 characters of lowercase base32 (a to z and the digits 2 to 7), then .onion. Case does not matter in the address bar; the browser lowercases it for you. What matters is length. Five characters short is a different site. Five characters swapped is a different site.
All three addresses above begin with blackops. That prefix is branding, and it is also the first thing a fake gets right. A real address and its lookalike can share the entire prefix and still differ in a single character halfway down. Which is why the check that catches mistakes sits at the end: compare the last six characters against the list, not the beginning.
Patterns actually in circulation
The market publishes confirmed phishing addresses on its Dread board. A sample of what that list looks like, quoted from it:
| Pattern | Example | What to notice |
|---|---|---|
| Impostor prefix | blackopy7iz5awm7…bjgmeyd.onion |
Letter seven is y, not s. The eye reads blackops and moves on. |
| Character swap, wrong tail | blackops3zlg…hf6zqd.xyz |
One middle character differs from a real mirror, and the address ends in .xyz. Read the last three characters. Always. |
| No prefix at all | 3wn6ueaz…aro77ezwad.onion |
Valid format, valid length, zero resemblance to the market once you stop skimming. |
The .xyz row deserves a second look, because it is the cruelest. The same 56 characters with a different three letter ending is not an onion at all. It is a regular website that anyone can register, and it can render the market's login page pixel for pixel.
An onion only works as an onion. If the ending is anything other than .onion, the 56 characters in front of it are decoration.
Save all three
Write all three down in the place you keep market business, encrypted if you keep such things. An address change is announced on the market's channels, not on yours. When the old address dies, the list you saved is what gets you back in. Verifying an address covers both the character check and the signed list on Dread.