darkmatter antiphishing signature wasnt working and i still placed the order and seemingly it worked? : DarkMatterMarket | Torhoo darknet markets

I was making an order and tbh Ive been a little confused, learning a lot, realizing there's a lot I shouldve been doing differently this whole time, ever since archetyp got seized, as that was the only market I had ever used until then. I place an order on Dark Matter, and the page with the xmr address and antiphishing pgp signature comes up, & I try to verify the signature in kleopatra & it doesn't work. I figure I'm likely just doing something wrong lol so I log in on a different mirror to verify that the new order is there & the xmr address is the same; it is. I try the signature on a new mirror and it still doesn't work. I figure that it's probably fine lol & I send the xmr.

Then I'm fucking around on one of the mirrors, looking around, reading shit, and find something about verifying the link that I hadn't seen before & I havent been able to find since. It tells me that I'm actually on a phishing link & asks me to put in my public key & I do & then I freak out and go on a different mirror from daunt & change my password & double check that the pgp key i grabbed of darkmatter when making the order was the same as the one I used for the same vendor on archetyp and it was.

I've checked several mirrors (every mirror in this story is from daunt) and my order is showing up as paid but I'm still slightly noided cuz normally this vendor immediately accepts any paid orders weekday mornings and it's still just marked as paid. I'm probably good? But why wasn't the pgp signature working? And should I change my pgp public key?