Recently added
Browse dated community launches and imported or editorial directory additions.
This dataset maps the network layer of the Invisible Internet Project (I2P), collected using the SWARM-I2P framework, which deployed I2P routers as mapping agents. It documents over 50,000 nodes with metrics such as bandwidth, latency, and uptime, plus network traffic records and geographic distribution. Node identifiers were anonymized. Data is available in CSV and TXT formats on Zenodo, with mapping scripts on GitHub.
Europol assessment of online organized crime, including criminal services and dark-web developments.
Europol and EMCDDA report on darknet drug markets, policy implications and research evidence.
Dizzy is an open-source crawling and analysis system for onion services. It implements techniques to explore, update, check, and classify onion services at scale without overwhelming the Tor network. It was deployed in April 2021 and used to analyze more than 63.3 million crawled onion webpages, focusing on domain operations, web content, cryptocurrency usage, and web graph.
DARPA Memex is a program seeking to develop next-generation search technologies for discovering, organizing and presenting domain-specific content. It aims to extend search beyond a centralized model to the deep web and nontraditional content. The program initially plans to address fighting human trafficking. It is specifically not interested in deanonymizing servers, attributing identity to IP addresses, or accessing non-public information.
This arXiv paper proposes an end-to-end scalable architecture for early identification of new Tor sites and daily analysis of their content. It is built on an open source big data stack including Kubernetes, Kafka, Kubeflow and MinIO, discovering onion addresses across several sources, downloading HTML from Tor, deduplicating with MinHash LSH and categorizing with BERTopic modeling. In 93 days it identified 80,049 onion services and characterized 90% of them.
CRATOR is a proposed dark web crawler described in an arXiv paper. It is designed to extract pages that handle security protocols such as captchas, using seed URL lists, link analysis and scanning to discover content, with user-agent rotation and proxy usage for anonymity. The authors report evaluation using coverage, performance and robustness metrics, and suggest threat intelligence, cybersecurity and online investigation applications.
Open-source research crawler for collecting links and metadata from reachable onion pages.
Open-source command-line tool that queries multiple onion search engines and exports results.
onionsearch is a Python script that scrapes URLs on different .onion search engines. It is distributed on PyPI as version 1.3, released on October 22, 2021, under the GNU General Public License v3. The package page states the author has not provided a project description.
Open-source scanner for auditing onion-service metadata and operational security.
Open-source utility for gathering public metadata about onion services during authorized research.
Open-source interface and API project for searching indexed onion content.
Ahmia is a search engine for services on the Tor network. It indexes hidden services, which require the Tor browser bundle to access, and states that abuse material is not allowed and is removed from the index. The project is developed as free and open source software, with a crawler, an index and a search website.
Open-source tracker monitoring ransomware leak sites and publishing structured status data.
RansomLook is an open-source intelligence site that tracks ransomware groups, markets and threat actors, displaying posts and activity statistics. It reports 35,915 ransomware posts across 634 groups, 147 markets and 32 actors, alongside leak, ransom note and crypto address counts. An API and torrent intelligence features are listed.
Cybernews checker for seeing whether an email or phone appears in known data leaks.
Mozilla service that checks email addresses against known breaches and explains protective steps.
Leakedpassword.com searches across multiple data breaches to check whether a password has been compromised. It also provides an API for use in signup processes to validate users' passwords, drawing its data from Have I Been Pwned and requiring no authentication.
Leak-awareness search page for checking whether identifiers appear in exposed datasets.
Identity Theft Resource Center database documenting publicly reported US data compromises.
Have I Been Pwned is a data breach search and notification service. It lets users check whether an email address appears in known data breaches and lists instances where data was found in paste records. It also offers an MCP server that connects AI agents to breach, password, paste, domain and stealer log data.
Checker for seeing whether a phone number or profile appears in Facebook-related breach data.
eCrime.ch is an extortion exposure monitoring platform for enterprise security, incident response and third-party risk teams. It detects, verifies and delivers ransomware and data-leak signals with context such as entity mapping, artifacts, links and timelines. The site states it monitors 280+ extortion and leak sources and delivers alerts through dashboard, email, Slack, API and reports. A REST API provides tracker, intelligence, file-search, screenshot, actor, leak-site and torrent-monitoring data.
