Checking an address is real

You do not have to take this page on trust. Two checks together make a fake address almost impossible to pass off.

The signed list

BlackOps signs its current addresses with the market PGP key, the same one on its Dread profile. Import that key once, then check any signed list they post.

gpg --import blackops.asc
gpg --verify mirrors.txt.asc mirrors.txt

If you see Good signature, the list came from the key holder and nobody changed it. If the address you are about to open is not on that list, stop and do not type your password.

The login screen

A real BlackOps login shows the address it is running on, both in the header and inside the anti-phishing image. Read it and compare it to your browser bar before you type anything. A copy can fake the look of the page but it cannot show the correct address in both places while sending you somewhere else.

Updated 2026-07-19 · Entry points