Torhoo onion mirror : torhoocc3yugradvhrppml2fin4xob7kgg7uf42s4xk7p6r5vzy62ead.onion

verify link help : DarkNetMarkets | Torhoo darknet markets

what I am doing is adding /pgp.txt to the onion to get the public key then I take that off and add /mirrors.txt to get the encrypted message but then when I try to decrypt it, it tells me that it wasn't even encrypted I'm so confused and now scared that I'm on a phishing site although the link I used was from tor.taxi, sorry guys I'm new and trying to learn, all help will be greatly appreciated and also don't hate on me for this but I should note that I am on an Android phone, I'm not in the position to have a computer sadly.

/u/quark P

1 points

5 months ago

Always use links from daunt.link or check /d/superlist

/u/reemothedreamo 📢

1 points

5 months ago

So if just use those things I should be fine without verifying with pgp?

/u/quark P

1 points

5 months ago

Nooo am not telling you not to verify, always make sure you verify!
But links from daunt.link or /d/superlist is 100% from the official market!!
also most market keep their keys and sign message on the same spot either mirror.txt, canary.txt, keys.txt or pgp,txt.

/u/reemothedreamo 📢

1 points

5 months ago

So what's happening to me is I got their key using pgp.txt and I added it to my Open keychain app on Android but as for the mirror.txt when I put that in to decrypt what it gave me it said that it wasn't even encrypted

/u/reemothedreamo 📢

1 points

5 months ago

And it also said "signed by in confirmed key" so I think I understand know, what I'm looking for is just to make sure the keys match and what was throwing me off is that it says unconfirmed key because I need a QR code for the app to consider it a confirmed key, but since "the u confirmed key" was indeed the key that signed the message that I put in to decrypt does that mean that it checks out, sorry if that's confusing, thank you so so much for helping me

/u/reemothedreamo 📢

1 points

5 months ago

And last thing, I have to keys, one says abacus and the other one says abacus service, are those both legit because when I was first looking for their public key I found two I guess

/u/reemothedreamo 📢

1 points

5 months ago

Like the links they provide are already verified an I should be fine?

/u/samwhiskey https://daunt.link

1 points

4 months ago

Daunt is dread's link service and all the links are good. You can verify them on daunt.