Published: November 2026 · Reviewed: November 2026 · English
Our standards are designed to make our work transparent, careful, and useful.
Accuracy and attribution
We identify sources, distinguish direct evidence from commentary, and avoid presenting allegations as established facts.
Uncertainty and corrections
When information is incomplete or conflicting, we say so. Material errors should be corrected transparently.
A practical decision sequence
Pause before interacting. Read the message in context, inspect the displayed destination without opening it, and ask whether the request is expected. Navigate to a service through a trusted bookmark or manually entered address rather than following an unsolicited login link. Never share a one-time code in response to an unexpected request.
If you already interacted with a suspicious page
If you entered a password, change it using the service’s independently verified website and change it anywhere it was reused. Revoke unfamiliar sessions, review recovery email and phone settings, enable phishing-resistant multi-factor authentication where available, and contact the service through its published support channel. If you downloaded a file, avoid opening it and use reputable device-security guidance.
Why no single visual clue is conclusive
A lock icon, polished design, familiar logo, or grammatically correct message does not establish legitimacy. HTTPS protects a connection to a domain; it does not prove that the domain belongs to the organization it imitates. Assess identity and context separately.
Source and scope note
This guide is general defensive education, not incident-response advice tailored to a particular device or organization. For organizational incidents, follow your security team’s process. See CISA guidance on recognising phishing and enabling multi-factor authentication.
Further reading
For general standards on helpful, reliable content and search spam, consult the primary guidance and the relevant technical or policy documentation. These references support general methodology; they do not independently verify claims about any named marketplace.
Research references and verification notes
The references below support general research, safety, privacy, or search-quality methodology. They do not independently verify claims about any named marketplace, its operators, current status, ownership, or access addresses. Such claims require separate, claim-specific evidence and editorial review.
- CISA: Recognize and Report Phishing — Public cybersecurity guidance on identifying and reporting phishing.
- FTC: How to Recognize and Avoid Phishing Scams — Consumer guidance on phishing messages and protective steps.
- NIST Cybersecurity Framework — A risk-management framework for cybersecurity programs.
- OWASP: Phishing guidance and awareness resources — Open security resources; consult relevant project guidance for implementation.
Editorial status: This page is an educational overview. Before relying on a time-sensitive claim, check the original source, publication date, scope, and any later correction.