http://onionapn6vdvrsegzo2qj3ridxys6q4ohwcglvclwtgzj7ptcxwmoxid.onion
Phishing reports get pinned at the top of the comments by mod. Vendors: vendor support thread is sticky #2, do not derail this one. Quick verification: open one of the mirrors in Tor Browser, scroll to the footer of the login screen, copy the signed timestamp block, run gpg --verify against the published key.