Question GammaGoblin/Pushing Taboo phish?

[cubesquare]

Hello All,

I was introduced to GammaGoblin by a vendor in a market - I was given this link:

http://jich6wsx2nmvayh34mjo7zj6wwu6jiahzdf3au7fiazx2wzvlftqcxad.onion/

I did some checks against the link at various DNM listing sites and it checked out ok so I registered.

Gearing to make a purchase and I decided to go and double check and found a site (top of search results) called gammagoblinstore.com on which they publish the following link:

http://gammaemg7i7k7wenjownsjsenogaqdd6gb5zu2553xve44vxxfj6fiad.onion

So I went to check the new link - looks legit, lots of reference to this link in DNM lists and it looks almost exactly the same.

The firts link has a notice to read that talks about DDOS and attacks and a DB having to be recreated so please create new accounts and stuff, the second one does not have this notice and my user (created on the first one) does not log into the second.

So one of them is a phish... I cannot determine which one, any views?

(my account was created for that and I have discarded account/pwd/pgp for it as I tried to log into both)

How do we check the validity of new markets... I thought I was given a link by a trusted vendor so I would assume that's right, but now I am questioning everything

 

[HEISENBERG]

PushingTaboo GammaGoblin

#1 jich6wsx2nmvayh34mjo7zj6wwu6jiahzdf3au7fiazx2wzvlftqcxad.onion

#2 ujhwc2qkg6l4zxbxdnrwsi5ptu5lbyuu3cqshppqais4rhjfs6b73nyd.onion

#3 mb2lgzfcwykc5ggbrm2ai2im2q3jfvohc5qykxrm5kdg5ju5p22b7gid.onion

 

[cubesquare]

That makes me feel better about my vendor trust relationship thanks - still - trust is hard to come by and even harder to verify until its too late...
I wonder what can be done to validate the authenticity of a site when they are so easy to phish with .onion names...