The mirror list

Three public mirrors. Same market, same accounts, same escrow, same order history. What differs between the addresses is which front node serves the market, not what is behind it.

Mirror addresses · 3

same market · no ranking
ONIONtail dpsdad
blackops27m32abqvbhnyswgazqawxqbznbzkkkv5sjo7gve2ndpsdad.onion
ONIONtail r67hid
blackops5l63qnwnmlnsfvtlu66md3x3vp3fdtpna42eq7ozujr67hid.onion
ONIONtail ak4dqd
blackops6kignp3eddmvqcfkjzf6qr6haxbmkypc2xtqlnhuu4ak4dqd.onion

Copy one address, paste it into the Tor Browser, and compare the last six characters against what landed in the address bar. If one will not connect, build a new circuit and take the next. Why an onion refuses to load.

How to read an address

A v3 onion is 56 characters of lowercase base32 (a to z and the digits 2 to 7), then .onion. Case does not matter in the address bar; the browser lowercases it for you. What matters is length. Five characters short is a different site. Five characters swapped is a different site.

All three addresses above begin with blackops. That prefix is branding, and it is also the first thing a fake gets right. A real address and its lookalike can share the entire prefix and still differ in a single character halfway down. Which is why the check that catches mistakes sits at the end: compare the last six characters against the list, not the beginning.

Patterns actually in circulation

The market publishes confirmed phishing addresses on its Dread board. A sample of what that list looks like, quoted from it:

PatternExampleWhat to notice
Impostor prefix blackopy7iz5awm7…bjgmeyd.onion Letter seven is y, not s. The eye reads blackops and moves on.
Character swap, wrong tail blackops3zlg…hf6zqd.xyz One middle character differs from a real mirror, and the address ends in .xyz. Read the last three characters. Always.
No prefix at all 3wn6ueaz…aro77ezwad.onion Valid format, valid length, zero resemblance to the market once you stop skimming.

The .xyz row deserves a second look, because it is the cruelest. The same 56 characters with a different three letter ending is not an onion at all. It is a regular website that anyone can register, and it can render the market's login page pixel for pixel.

Rule of thumb

An onion only works as an onion. If the ending is anything other than .onion, the 56 characters in front of it are decoration.

Save all three

Write all three down in the place you keep market business, encrypted if you keep such things. An address change is announced on the market's channels, not on yours. When the old address dies, the list you saved is what gets you back in. Verifying an address covers both the character check and the signed list on Dread.