metrics.torproject.org
Protocol and API documentation for Tor relay and bridge status data used by network tools.
Directory
Dark Web & Underground
Dark Web and Underground collects research, journalism, and tools that relate to hidden services and anonymous publishing. Whistleblowing and anonymous publishing covers secure drop systems and submission platforms. Tor and hidden services holds the software, directories, and explanation pages around the Tor network. Dark web research and studies and dark web news and analysis gather academic work, reports, and reporting on how these networks are used. Breach and leak research lists data breach checkers and disclosure trackers, and deep web resources and discovery covers guides to what sits beyond indexed pages. Archives and historical records, dark web search and directories, and underground communities and forums make up the remaining topics. Several entries here are news archives or academic projects rather than services you sign up for, so weigh each one by who published it and when.
gitlab.torproject.org
Tor measurement project collecting performance data for public relays, bridges and onion services.
github.com
Open-source scanner for auditing onion-service metadata and operational security.
pypi.org
onionsearch is a Python script that scrapes URLs on different .onion search engines. It is distributed on PyPI as version 1.3, released on October 22, 2021, under the GNU General Public License v3. The package page states the author has not provided a project description.
github.com
Open-source command-line tool that queries multiple onion search engines and exports results.
ooni.org
The OONI Probe Tor test provides an automated way of examining whether Tor works in a tested network. It measures the reachability of Tor directory authorities, OR ports and obfs4 bridge addresses. The Tor network is described as free and open source, providing online anonymity, privacy and censorship circumvention.
nusenu.github.io
OrNetStats presents statistics and network health data about the Tor network and its relay groups. It reports on relay families, Autonomous System shares, MyFamily misconfigurations, end-of-life tor releases and potential risk to users, and displays Authenticated Relay Operator IDs in place of unverified ContactInfo strings.
cybernews.com
Cybernews checker for seeing whether an email or phone appears in known data leaks.
propublica.org
ProPublica instructions for submitting documents securely through its verified SecureDrop service.
rand.org
RAND study of illicit online markets and the operational lessons they present for public policy.
ransomlook.io
RansomLook is an open-source intelligence site that tracks ransomware groups, markets and threat actors, displaying posts and activity statistics. It reports 35,915 ransomware posts across 634 groups, 147 markets and 32 actors, alongside leak, ransom note and crypto address counts. An API and torrent intelligence features are listed.
sizeof.cat
Research article cataloging ransomware leak sites and explaining how their status is tracked.
ransomwatch.telemetry.ltd
Open-source tracker monitoring ransomware leak sites and publishing structured status data.
recordedfuture.com
Insikt Group is the research unit of Recorded Future. It conducts research on cybercrime, state-sponsored threats and global issues, and supplies analyst-validated data, analytics and cyber and geopolitical intelligence to the Recorded Future Platform. Its resources include intelligence reports, threat briefings and information on threat actors.
onlinelibrary.london.ac.uk
A library support page explaining the invisible web, also called the deep web or hidden web. It states that search engines cover about 16% of the internet and advises against relying on them alone, especially for academic information. It lists content search engines cannot find, such as dynamically changing content, password protected resources and sites requiring registration, and suggests web directories and asking a librarian.
slcyber.io
Research and explainers on dark-web investigations, criminal forums and threat-intelligence methods.
securedrop.org
Open-source whistleblowing system that lets sources submit documents to newsrooms over Tor.
securedrop.org
Official directory of active, verified SecureDrop instances operated by news and advocacy organizations.
docs.securedrop.org
SecureDrop for Sources is a documentation guide introducing sources to using SecureDrop. SecureDrop is a tool news organizations and NGOs use for secure and anonymous communication between whistleblowers and journalists. Submitted information is encrypted, no personal information is collected, and it is not a cloud service. It accepts messages and individual file uploads up to 500MB.
securityaffairs.com
Reporting archive on dark-web crime, underground forums, data leaks and law-enforcement actions.
wikileaks.org
WikiLeaks archive for searching the Sony email release and related historical documents.
stefaniamaurizi.it
A secure contact page for journalist Stefania Maurizi directing sources to use SecureDrop rather than email or phone. Visitors access the .onion SecureDrop address through the Tor Browser to anonymously send messages or documents. The page recommends using Tails from a public computer and public WiFi at a location not usually visited.
stem.torproject.org
Stem is a Python controller library for Tor. It implements Tor's directory and control specifications, allowing scripts and applications to interact with the Tor process through its control protocol. The latest version is 1.8.1, released September 2022, and the project is noted as mostly unmaintained. It requires only Python.
sueddeutsche.de
Süddeutsche Zeitung instructions for submitting documents securely through its verified SecureDrop service.