Why One Reference Matters
Listing many mirrors confuses researchers and helps phishers. We study one reference address and teach how to check its PGP-signed mirror list, rather than publishing rotating gateway lists.
PGP Verification Ritual
Import the research public key, fetch mirrors.asc, run gpg --verify mirrors.asc. If the fingerprint mismatches, treat the page as a phishing clone and close the session. Learn more in our research guide.
Phishing Red Flags
Look-alike clearnet domains, missing PGP blocks, JavaScript demands, and password reuse prompts are common clone tactics. Cross-check with community reports on r/darknet and background on darknets.
Copy, don't type. Verify, don't trust.