How to Verify a Mars Market Mirror
The difference between the real Mars Market and a copy built to take your deposit is a two minute check. Most people skip it, and the ones who skip it are the ones who lose. This is the check, end to end, with nothing left out.
Step one, the canary
Open any mirror you believe is real and pull the canary from its main page. The canary is a short message signed by the operator that lists every live address. If the address you are about to use is on that signed list, it is real. If it is not, it is not, and no amount of correct branding changes that.
Step two, the fingerprint
Compare the operator key in the footer to the fingerprint you pinned the first time. They match, the key is the one you trust. They do not, stop. A lookalike can copy a page, but it cannot sign with a key it does not hold.
The step people skip
Checking the deposit address. The genuine storefront signs every address it issues. Export the signature and check it in GnuPG before you send. Two more minutes, and it is the step that catches the clones that got the first two right.