blackops-official[.]ink

On July 25, 2026, analysts recorded that the domain blackops-official.ink is currently active and classified as a high‑risk generic phishing site. The domain was created on February 21, 2026 and is registered through NiceNIC International Group Co., Limited. DNS resolution points to the IPv4 address 176.116.0.49, which is hosted in the Netherlands under AS200019 (ALEXHOST SRL). The authoritative nameservers are ns3.my-ndns.com and ns4.my-ndns.com. Web service responses return HTTP status code 521, indicating that the origin server is refusing connections, and the underlying web server software is identified as Nginx. The site presents an SSL certificate issued by Let’s Encrypt, using the R13 intermediate, confirming that TLS is active but does not imply legitimacy.

VirusTotal analysis shows that 2 of 93 security vendors have flagged the domain, providing limited but concrete detection evidence. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing its malicious classification. Gridinsoft’s trust scoring system assigns a score of 0 out of 100, reflecting an extreme lack of trust.

The page title retrieved from the site reads "BlackOps Market: Official Verified Links & Security Guide 2025," suggesting an attempt to masquerade as an authoritative resource for a market or service named BlackOps. No additional content, such as login forms or credential‑harvesting mechanisms, has been confirmed, leaving the exact phishing payload uncertain. However, the combination of a recent registration, low trust score, positive blocklist entries, and vendor detections strongly indicates a malicious phishing operation.

Defenders should block the domain at perimeter and DNS layers, monitor outbound connections to the associated IP address, and include the domain in threat‑intel feeds. Continuous re‑scanning on platforms such as VirusTotal is recommended to capture any evolving detection signatures.