Onion mirror
The Tor address a leak site or market publishes alongside its clear-web one, so that seizing a domain does not remove the service. Usually several, listed together, rotated as they are found.
Why it matters to you
A takedown that removes only the clear-web name changes the address rather than the availability. Judge a disruption by whether the mirrors went with it.
Where we meet it
Mirrors are announced by the crew itself, because customers have to reach them. We keep the entry after the crew pulls it, so the record survives the rotation.
Connected terms
DLS / leak site
A ransomware group's "dedicated leak site": victim announcements, countdown timers and proof packs, published to convert embarrassment into payment.
Bulletproof hosting
Hosting sold on the promise that abuse complaints go unanswered and legal requests go unread. Priced well above ordinary hosting, because that indifference is the entire product.
Mirror channel
The replacement a Telegram market opens before the original is banned, announced in advance and linked from everywhere the crew operates. Continuity as an operating procedure rather than an accident.
Where this term stops being vocabulary
Dragnet is where you watch it happen to you
Knowing the word is the cheap half. The platform is the half where the term arrives attached to your domain, with a timestamp and the source it came from.
More from the infrastructure
Antidetect browser
A browser built to present a consistent, disposable fingerprint per profile: its own canvas, fonts, timezone and proxy. Sold so a stolen session can be replayed from a machine that looks like the victim's.
Bulletproof hosting
Hosting sold on the promise that abuse complaints go unanswered and legal requests go unread. Priced well above ordinary hosting, because that indifference is the entire product.
C2 panel
The web console an operator uses to run infected machines: victims listed, tasks queued, output collected. Sold with the malware, screenshotted in the advertisement, and often the most revealing artifact a crew produces.
Crypto mixer
A service that pools cryptocurrency from many senders and pays out from the pool, so that the link between an incoming and an outgoing transaction is broken. Charged as a percentage, sometimes with a delay bought separately.