Know who is actually coming for you

Most guides describe how things work and leave you to guess where the danger is. This one starts from the other end. Fourteen adversaries, each with a page: what they want, how they make money, how they operate, what gives them away, and what stops them. Nothing here is theoretical. Every one of them is running right now, against people who read the same guides you did.

14 adversaries profiled6 countersNo uptime claims

Four things worth knowing before the list

Cheap beats clever

Almost nobody is caught by anything sophisticated. The common attacks are common because they cost the attacker nothing.

Urgency is the seam

Nothing here legitimately needs you to act inside a stated period. A clock is not a schedule.

Recognition is not evidence

A familiar address, a familiar layout and a fast response are all things a copy reproduces perfectly.

One check covers most of it

A signature verified against a fingerprint you established yourself defeats or badly weakens almost every profile in this register.

How almost every one of them actually runs

The names differ and the shape barely does. Once you have seen the four steps, most of the register becomes recognisable on sight rather than something you have to memorise.

Reach you somewhere ordinary

A search result, a directory, a forum thread, a saved bookmark. Nothing exotic, because exotic is expensive and unnecessary. The channel just has to look like where you would normally look.

Look exactly right

The page is copied, the address opens on the recognisable characters, the interface matches your memory. Every heuristic short of a signature returns a positive.

Give you a reason to hurry

A deadline, an outage, a warning, a problem with your account. Urgency is the only thing that reliably stops people checking, so it is present in nearly every one of these.

Take one action from you

A password typed, an address pasted, a payment sent outside escrow. One action, once, and the rest follows without you.

The one to internaliseStep three is the seam. Almost nothing legitimate in this space needs you to act inside a stated period, so a clock is not a schedule, it is the attack telling you what it is.

Who is after you

Sorted roughly by how many people they reach. The first four account for most of what actually happens to ordinary buyers.

Who is after youFourteen profiles. What each one wants, how they earn, and what gives them away.Section The clone operatorCopies the login page and waits. The most common and the cheapest to run.Most common The recycled address operatorWaits at an address you already trust. Reaches the most experienced users.Hits veterans The fake support accountAnswers a question you asked in public. There is no support channel to impersonate.Categorical The outage opportunistWorks one window: the half hour when nobody can check anything.Timed The clipboard swapperNever touches the market. Changes an address between your copy and your paste.Your machine The credential stufferHas never heard of you. Tries a password you used somewhere unrelated.Automated The off escrow persuaderAsks you to pay directly. The only genuinely unrecoverable loss on this site.Unrecoverable The exiting vendorTrades honestly for a year, then spends the whole reputation at once.Patient The long con accountSpends a year being genuinely helpful so one post lands.Patient The account buyerSkips the year of patience by purchasing somebody else's history.Cheap patience The directory buyerBuys a link list nobody maintains and changes what it lists.Quiet handover The key rotation forgerAnnounces that the signing key changed, because that is the one check you cannot repeat.Hardest The gateway operatorOffers to open onion addresses for you, and therefore reads everything you send.By design The flooderDoes not want your money. Makes the real addresses unusable so somebody else can offer you one.Enabler

What stops them

Six habits. Between them they cover every adversary above, which is the useful part: you are not learning fourteen defences, you are learning six.

What stops themSix habits that between them cover the whole register.Section Verify on arrivalUnder a minute, and it settles what nothing else can.Do every time Pin a fingerprint onceCareful work for an hour, once. Everything else depends on it.Do once Read the middleForgeries match the ends. Substitutions replace everything. Check accordingly.Five seconds Unique credentialsUniqueness is the property that matters. Strength is not the issue.Do once No parked balanceThe most common loss has no attacker attached to it at all.Free Refuse to hurryUrgency is the one thing every adversary here needs from you.Do always

What this site is

A register, not a link list

The three addresses at the top of every page are published, not monitored. This site checks nothing and states no uptime figure, because a number it cannot back is worse than no number at all. Treat them as a starting point and do the verification yourself.

What that means in practice

No status badges. A green light means a machine answered, and a convincing fake answers faster than the real thing.
No freshness claims. Nothing here says checked today, because nobody checked today.
No exclusivity. Nothing on this page is available only here.

Paid by nobody

No advertising, no affiliate arrangement, no money from any market. Worth stating plainly, because the standard business model for a site covering this ground is to be paid by the thing it covers, and readers have no way to tell from outside which sites are.

Also not covered here

Products or sourcing. Not a gap to be filled later.
Packaging or avoiding detection. Outside what this site is for.
Anything about running these attacks. The method is described to the depth needed to recognise it and no further.

If you read one page, read this one

Every adversary in the register is stopped or badly weakened by the same check, run on arrival, taking under a minute. It is the closest thing to a single answer this subject has.

The check that settles it

Questions people ask

Which of the three addresses is the real one?

All three are published addresses for the same market, and none of them prove anything by appearing here. That is the point of checking on arrival rather than trusting a list.

Is this site telling me BlackOps is unsafe?

No. It is describing the people who operate around any market of this kind, most of whom have nothing to do with the platform itself. Several of them would be running whether the market existed or not.

Why no uptime percentage?

Because this site measures nothing and will not print a figure it cannot back. Sites that publish one rarely say what it measures, and the answer is almost always reachability, which a fake passes easily.

BlackOps addresses