# blackops-market.xyz: Recorded Darknet Marketplace Landing Page | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/blackops-market.xyz/
Machine-readable companion: https://phishdestroy.io/domain/blackops-market.xyz/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: Last known active
- First observed by PhishDestroy: 2026-11-12 13:59:54 UTC
- Selected availability observation: 2026-11-12T14:27:50Z
- Stored record updated: 2026-11-12 15:46:58 UTC
- VirusTotal detections in the stored snapshot: 1/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean

## Stored infrastructure

- Observed IP address: 172.67.179.191
- Registrar in stored WHOIS data: NameSilo, LLC
- Registrar country in stored WHOIS data: US
- Last stored HTTP status: 200 (observed: 2026-11-12T14:27:50Z)
- Registration date in stored WHOIS data: 2026-04-28 10:46:07 UTC

## Evidence links

- URLScan report: https://urlscan.io/result/01a1d026-8437-71db-8908-9d8370079959/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/blackops-market.xyz
- Certificate Transparency search: https://crt.sh/?q=%25.blackops-market.xyz
- Web Archive lookup: https://web.archive.org/web/*/https://blackops-market.xyz/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy records blackops-market.xyz as a page presenting itself as a darknet marketplace for vendors and buyers, with mirror links and featured images.

On 2026-11-12, blackops-market.xyz displayed a landing page headed "Black ops market" under a BLACK OPS logo, with navigation links for Main Link, three mirrors, Black Ops Market, and Darkweb Markets. The page text states the project launched in September 2024 and aims to serve newcomers and experienced vendors with onboarding, inventory management, reputation tracking, and listing tools. Below, a Featured Images section shows screenshots of a browser check screen, a challenge prompt, and a product grid.

The stored VirusTotal domain result reports 1 detections out of 92 engines. Forcepoint ThreatSeeker reported "suspicious".
Package revision: 7bae00eae78e9d09a948a303d816cd856a68fba05812c5bf1db067813cfec103
Text generated (not scan time): 2026-11-12 15:50:19
Reviewed evidence snapshot: {"domain":"blackops-market.xyz","screenshot_available":true,"capture_contract":"verified-capture-20261102","plain_text_contract":1,"capture_context":{"submitted_host":"blackops-market.xyz","final_host":"blackops-market.xyz","redirects":[],"captured_at":"2026-11-12T14:03:11Z","uuid":"92ed30ab-c6b0-4be4-8c91-f2bafed89345","report_url":"https://radar.cloudflare.com/scan/92ed30ab-c6b0-4be4-8c91-f2bafed89345","sha256":"627a31bc5e04b9e7302714dcef79527bc592d65d10f1313dbebb4d1353a6afcf","relationship":"own_domain_page"},"redirect_text_policy":"explicit-redirect-v1","initial_ai_description":"The website describes itself as a 'Darkweb Market' and discusses 'onion links', 'darknet marketplaces', and features for 'vendors' and 'buyers' in a context that strongly implies illegal goods or services. The mention of 'Mandatory PGP and 2FA' is a common security feature on darknet markets.","initial_ai_description_kind":"unverified previous AI opinion","virustotal":{"scope":"domain","detections":1,"engines":92,"malicious":0,"suspicious":1,"analysis_date":"2026-11-12","retrieved_date":"2026-11-12","vendor_labels":{"Forcepoint ThreatSeeker":"suspicious"},"flagging_vendors":["Forcepoint ThreatSeeker"]},"virustotal_public_summary":"The stored VirusTotal domain result reports 1 detections out of 92 engines. Forcepoint ThreatSeeker reported \"suspicious\".","page_paragraph_target_characters":556}
Source facts (timestamps as stored): {"record_id":1942482,"first_recorded_at":"2026-11-12 14:59:54","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":1,"denominator":92,"malicious":0,"suspicious":1,"vendors":{"Forcepoint ThreatSeeker":"suspicious"},"observed_at":"2026-11-12T07:22:22Z","checked_at":null,"fetched_at":"2026-11-12T14:02:08Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":1,"denominator":92,"malicious":null,"suspicious":null,"vendors":["Forcepoint ThreatSeeker"],"observed_at":"2026-11-12 07:22:22","checked_at":"2026-11-12 15:02:08","fetched_at":"2026-11-12 14:02:09","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":{"Forcepoint ThreatSeeker":"suspicious"},"vendor_names":["Forcepoint ThreatSeeker"],"stats":{"timeout":0,"harmless":56,"malicious":0,"suspicious":1,"undetected":35}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-12 15:48:24"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":"2026-11-12 16:46:58"},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1942482,"scope":"checked_url","observed_at":"2026-11-12T14:27:50Z","http_status":200,"http_observed_at":"2026-11-12T14:27:50Z","stored_http_code":200,"stored_http_observed_at":"2026-11-12T14:27:50Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}}

## Stored page captures

- URLScan · 2026-11-12: https://screenshots.phishdestroy.io/us/01a1d026-8437-71db-8908-9d8370079959.png
  Captured: 2026-11-12 14:26:08 UTC
  Source report: https://urlscan.io/result/01a1d026-8437-71db-8908-9d8370079959/
  SHA-256: 769228b48e665546410cfc71fe31af466da957bcd39ac334fc2541c57e8c4fda
- URLScan · 2026-11-12: https://screenshots.phishdestroy.io/us/01a1d014-8242-737b-9a13-3026086a0591.png
  Captured: 2026-11-12 14:06:13 UTC
  Source report: https://urlscan.io/result/01a1d014-8242-737b-9a13-3026086a0591/
  SHA-256: 769228b48e665546410cfc71fe31af466da957bcd39ac334fc2541c57e8c4fda
- URLScan · 2026-11-12: https://screenshots.phishdestroy.io/us/01a1d020-7b1f-7360-b0c5-35967bcf43a6.png
  Captured: 2026-11-12 14:19:21 UTC
  Source report: https://urlscan.io/result/01a1d020-7b1f-7360-b0c5-35967bcf43a6/
  SHA-256: 769228b48e665546410cfc71fe31af466da957bcd39ac334fc2541c57e8c4fda
- Cloudflare Radar: https://screenshots.phishdestroy.io/cf/92ed30ab-c6b0-4be4-8c91-f2bafed89345.png
  Captured: 2026-11-12 14:03:11 UTC
  Source report: https://radar.cloudflare.com/scan/92ed30ab-c6b0-4be4-8c91-f2bafed89345
  SHA-256: 627a31bc5e04b9e7302714dcef79527bc592d65d10f1313dbebb4d1353a6afcf
- URLQuery: https://screenshots.phishdestroy.io/uq/172dd557-d636-4330-a621-b150652ca93b.png
  Source report: https://urlquery.net/report/172dd557-d636-4330-a621-b150652ca93b
  SHA-256: cbb3fd45d051ec7e8abdf09da50163f24d4dc50f22ba54f5a6bd809358b47d71

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-11-12T14:30:13Z",
        "uuid": "01a1d026-8437-71db-8908-9d8370079959",
        "scanned_at": "2026-11-12T14:26:08Z",
        "final_url": "https://blackops-market.xyz/",
        "status": 200,
        "ip": "104.21.59.151",
        "domains": [
            "static.cloudflareinsights.com"
        ],
        "ips": [
            "104.16.79.73",
            "104.21.59.151"
        ],
        "asns": [
            "13335"
        ],
        "link_domains": [
            "blackops3zlgfuq4dg4yrtxoe57u3sxfa34kqzbooqbovutleqhf3zqd.onion",
            "blackops4zfjqugajzrwokor34sv4sm5sf6pnegaevhgd7k7yt3rkbid.onion",
            "blackops527cggb6ybayggx3bjt24xz32rotdugs6ikejxdiik6dyiid.onion",
            "blackops66p7edjocooiipudvefdhupk27pi4y72iwnbbjvccky646yd.onion",
            "darknet-data.com",
            "darkweb-market.xyz"
        ],
        "doc_hash": "1abcfe37e4f33869ecc1b821bdfcb75e3332d84d1848802b9eac86f53ddaea5e",
        "globals": [
            "__cfBeacon",
            "el"
        ],
        "tls": {
            "san": [
                "*.blackops-market.xyz",
                "blackops-market.xyz"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE1",
            "subject": "blackops-market.xyz",
            "protocol": "QUIC",
            "valid_to": "2027-01-26T17:24:25Z",
            "valid_from": "2026-10-28T17:24:26Z"
        },
        "domain_age_days": 197,
        "apex_age_days": 197,
        "tls_age_days": 14,
        "tls_valid_days": 89,
        "requests": 11,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-2aab354"
                ],
                "score": 89,
                "malicious": true
            },
            "overall": {
                "score": 0,
                "malicious": false
            }
        },
        "headers": {
            "server": "cloudflare",
            "content-type": "text/html",
            "priority": "u=0,i"
        }
    },
    "cf": {
        "v": 1,
        "fetched_at": "2026-11-12T14:13:18Z",
        "uuid": "92ed30ab-c6b0-4be4-8c91-f2bafed89345",
        "scanned_at": "2026-11-12T14:03:11Z",
        "final_url": "https://blackops-market.xyz/",
        "status": 200,
        "history": [
            {
                "url": "https://blackops-market.xyz/",
                "status": 200
            }
        ],
        "dom_hash": "2bb7f6d67e884248247617bdbb0f3ab9e6d6ff4a86f9c24fd910f007ed3b7bd6",
        "doc_hash": "1abcfe37e4f33869ecc1b821bdfcb75e3332d84d1848802b9eac86f53ddaea5e",
        "phishing_v2": [
            "phishing"
        ],
        "radar_rank": {
            "bucket": ">200000"
        },
        "dns": [
            {
                "name": "blackops-market.xyz",
                "type": "A",
                "value": "172.67.179.191"
            },
            {
                "name": "blackops-market.xyz",
                "type": "A",
                "value": "104.21.59.151"
            },
            {
                "name": "blackops-market.xyz",
                "type": "AAAA",
                "value": "2606:4700:3032::ac43:b3bf"
            },
            {
                "name": "blackops-market.xyz",
                "type": "AAAA",
                "value": "2606:4700:3033::6815:3b97"
            }
        ],
        "dnssec_valid": false,
        "ip": "172.67.179.191",
        "whois": {
            "registrar": "NameSilo, LLC",
            "created": "2026-04-28T12:46:07Z",
            "updated": "2026-05-18T10:28:52Z",
            "expires": "2027-04-28T23:59:59Z",
            "nameservers": [
                "jasmine.ns.cloudflare.com",
                "cesar.ns.cloudflare.com"
            ]
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-11-12T14:02:08Z",
        "analysis_at": "2026-11-12T07:22:22Z",
        "stats": {
            "timeout": 0,
            "harmless": 56,
            "malicious": 0,
            "suspicious": 1,
            "undetected": 35
        },
        "detections": {
            "Forcepoint ThreatSeeker": "suspicious"
        },
        "reputation": 0,
        "categories": {
            "alphaMountain.ai": "Business/Economy (alphaMountain.ai)",
            "Forcepoint ThreatSeeker": "elevated exposure"
        },
        "registrar": "NameSilo, LLC",
        "created": "2026-04-28T12:46:07Z",
        "expires": "2027-04-28T23:59:59Z",
        "updated": "2026-05-18T10:28:52Z",
        "first_seen": "2026-05-04T00:36:43Z",
        "dns": [
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3032::ac43:b3bf"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.59.151"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "cesar.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "jasmine.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::6815:3b97"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "cesar.ns.cloudflare.com"
            },
            {
                "ttl": 3600,
                "type": "TXT",
                "value": "google-site-verification=cvvCO2SpYjmduZW100C5GimRQTUe63xhhCurCvQbxDw"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.179.191"
            }
        ],
        "dns_at": "2026-11-12T07:32:09Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.blackops-market.xyz",
                "blackops-market.xyz"
            ],
            "issuer": "Let's Encrypt / YE1",
            "serial": "6e44796089601bac2a1349e7a9dd59bf0d7",
            "sha256": "dc82bd6d2657eb73c4d92ac53ca41e346c55ca6c4eaa243908afe11647728645",
            "subject": "blackops-market.xyz",
            "valid_to": "2027-01-26T17:24:25Z",
            "valid_from": "2026-10-28T17:24:26Z",
            "observed_at": "2026-11-12T07:32:09Z"
        },
        "whois": {
            "registrar": "NameSilo, LLC",
            "registrar_iana_id": "1479",
            "registrar_url": "https://www.namesilo.com",
            "created": "2026-04-28T12:46:07Z",
            "updated": "2026-05-18T10:28:52Z",
            "expires": "2027-04-28T23:59:59Z",
            "status": [
                "clientTransferProhibited"
            ],
            "nameservers": [
                "cesar.ns.cloudflare.com",
                "jasmine.ns.cloudflare.com"
            ],
            "dnssec": "unsigned"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-11-12T15:13:04Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2026-11-12T14:20:02Z",
            "first": "2026-11-12T14:20:02Z",
            "changes": 0,
            "days_archived": 1,
            "avg_page_bytes": 8184
        },
        "robots_txt": {
            "agents": [
                "*",
                "Amazonbot",
                "Applebot-Extended",
                "Bytespider",
                "CCBot"
            ],
            "present": true
        },
        "social_tags": {
            "title": "Blackops Market | onion links and directories",
            "description": "Buy drugs and hacking tools on Blackops market, onion links and mirrors are available here. The best darkweb market online."
        },
        "trackers": {
            "requests": 8
        },
        "mixed_content": {
            "third_party_scripts": 0
        },
        "status": {
            "up": true,
            "code": 200,
            "timings": {
                "dns": 6,
                "tls": 47,
                "wait": 124,
                "connect": 16,
                "download": 1
            },
            "response_ms": 194
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 20160,
            "co2_grams": 0.0007,
            "cleaner_than": 57
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "108.162.195.119",
                    "host": "cesar.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.32.170",
                    "host": "jasmine.ns.cloudflare.com"
                }
            ],
            "zone": "blackops-market.xyz"
        },
        "location": {
            "ip": "2606:4700:3032::ac43:b3bf",
            "asn": "13335",
            "org": "Cloudflare, Inc.",
            "city": "Toronto",
            "country": "CA"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE1",
            "subject": "blackops-market.xyz"
        },
        "dns": {
            "A": [
                "172.67.179.191",
                "104.21.59.151"
            ],
            "NS": [
                "jasmine.ns.cloudflare.com",
                "cesar.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"cesar.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2419889669, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "TXT": [
                "google-site-verification=cvvCO2SpYjmduZW100C5GimRQTUe63xhhCurCvQbxDw"
            ],
            "AAAA": [
                "2606:4700:3032::ac43:b3bf",
                "2606:4700:3033::6815:3b97"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2606:4700:3032::ac43:b3bf",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://blackops-market.xyz"
            ]
        },
        "tech_stack": {
            "technologies": [
                "Cloudflare",
                "HTTP/3"
            ]
        },
        "linked_pages": {
            "external": [
                "https://darknet-data.com/",
                "http://blackops3zlgfuq4dg4yrtxoe57u3sxfa34kqzbooqbovutleqhf3zqd.onion/",
                "http://blackops4zfjqugajzrwokor34sv4sm5sf6pnegaevhgd7k7yt3rkbid.onion/",
                "http://blackops527cggb6ybayggx3bjt24xz32rotdugs6ikejxdiik6dyiid.onion/",
                "http://blackops66p7edjocooiipudvefdhupk27pi4y72iwnbbjvccky646yd.onion/",
                "https://darkweb-market.xyz/category/Market"
            ],
            "external_count": 6
        },
        "whois": {
            "registrar": "NameSilo, LLC",
            "created": "2026-04-28T12:46:07Z",
            "updated": "2026-05-18T10:28:52Z",
            "expires": "2027-04-28T23:59:59Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "jasmine.ns.cloudflare.com",
                "cesar.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare",
                "content-type": "text/html"
            }
        }
    }
}
```
Capture recorded with this analysis (source URL, capture time and stored hash): {"url":"https://screenshots.phishdestroy.io/cf/92ed30ab-c6b0-4be4-8c91-f2bafed89345.png","source":"Cloudflare Radar","report_url":"https://radar.cloudflare.com/scan/92ed30ab-c6b0-4be4-8c91-f2bafed89345","captured_at":"2026-11-12T14:03:11Z","sha256":"627a31bc5e04b9e7302714dcef79527bc592d65d10f1313dbebb4d1353a6afcf","model_image_sha256":"46a38eb0b3c58312768008f42f687398fd1f74646005b6ded765880ffd749ac2","available":true,"content_status":null}

## Complete dated records
Availability observations: https://phishdestroy.io/domain/blackops-market.xyz/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/blackops-market.xyz/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/blackops-market.xyz/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/blackops-market.xyz/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/blackops-market.xyz/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/blackops-market.xyz/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/blackops-market.xyz/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/blackops-market.xyz/records.json?source=content&format=json

## Dated availability observation
Latest stored reachability observation
```json
{
    "state": "alive",
    "label_key": "availability.active",
    "detail_key": "detail.latest_reachability",
    "params": [],
    "source": "current_http_probe",
    "record_id": 1942482,
    "scope": "checked_url",
    "observed_at": "2026-11-12T14:27:50Z",
    "http_status": 200,
    "http_observed_at": "2026-11-12T14:27:50Z",
    "stored_http_code": 200,
    "stored_http_observed_at": "2026-11-12T14:27:50Z",
    "legacy_site_status": "alive",
    "supports_outcome_badge": false,
    "content_classification": "unknown",
    "content_classification_at": null,
    "registration_state": "unknown",
    "policy": "20261102-dated-availability-v2"
}
```