The link was buried on page seven of search results, nestled between a defunct forum and a Russian cybersecurity blog. No sleek website. No testimonials. Just a single, flickering button that said: Retrieve.