A Beginner’s Guide to the Dark Web for Investigators
By Oxana Korzun, CFE, Fraud Expert / Investigations and Risk Management – San Francisco, California
A Short Instruction On How To Find Information On The Dark Web For OSINT Purposes
Many times, an investigation would lead me to the Dark Web. Sometimes it’s to dive into forums and gather intelligence, and other times it would be to check illegal goods markets selling counterfeit products of my clients.
Every time I mention that I use the Dark Web, people imagine a really scary place with criminals selling their goods right and left and that people can suffer dire consequences even for trying to open websites there.
Other people ask if it’s even legal to access it. It’s not illegal, and the right precautions and tools make it a safe enough place and a source of abundant information not searchable through traditional means.
Step 1. Get the Tor Browser
The Tor Browser provides access to .onion websites and is pretty good for browsing anonymously. The browser usually opens with the DuckDuckGo search engine which adds an additional layer of protection. It behaves as a regular browser and all surface websites can be open as well. The downside is that Tor is painfully slow.
Step 2. Install a Virtual Private Network (VPN)
VPNs mask users’ IP addresses and add more anonymity. There are many free VPNs, but they limit the number of countries that can be used to hide IPs. They are easy to use and can be activated with a one-click button. Browsers also have VPN extensions. VPNs still can log data so their use doesn’t make users completely anonymous (for example, Onavo Project, a free VPN, was collecting user data and giving it to Meta, both companies were sued and had to pay $10 million each).
Using them also can slow down the browsing process significantly.
Step 3. Find a List of Websites to visit
There is no one centralized place to find all Dark Web websites but many directories try to keep their databases updated. Hidden Wiki, OnionLinks are popular darknet directories (links to be opened in Tor). Investigators can also use dark web search engines like Ahmia or Haystack (to be opened in TOR). Many databases haven’t been updated for some time, and new Dark Web sites appear and disappear every day, so aggregators’ data needs to be re-checked.
If a website doesn’t open today, it still might work tomorrow. There is a service to check if the most popular darknet websites are down and find new links when the old ones don’t work.
Forums and chats are also great places to find information about the subject. Marketplaces are useful as well, but they contain mostly illegal content.
There is also Hunchly, a service I wrote about in my previous post, that provides a free daily dark report with new websites collected in a spreadsheet.
Things to Keep in Mind
Anonymity is incredibly important on the Dark Web. Using Tor and VPNs doesn’t make it 100% safe. It’s always a good idea to back up your computer data and check for malware and viruses on a regular basis. Some investigators use virtual machines or clean computers just for the Dark Web. Users should never share any information that can unveil their identity including email addresses, usernames, photos, and other easily searchable information.
Any data extracted from the darknet can be used in an investigation only after cross-checking and source verification. Criminals, hackers, law enforcement, and tyrannical governments can be all in one space and share fake information.
Find more about fraud and investigations in the Investigator Blog
More:
- The Tor Browser (torproject.org)
- Onavo Project (accc.gov.au)
- The Investigator Blog
- Fraud’s Dark Matter: The Universe of Scams Most of Us Never Know About (romancescamsnow.com)
- Darknet Cybercrime is Exploding in Southeast Asia (romancescamsnow.com)
- Hidden Wiki (zqktlwiuavvvqqt4ybvgvi7tyo4hjl5xgfuvpdf6otjiycgwqbym2qad.onion) – open in TOR
- OnionLinks (jaz45aabn5vkemy4jkg4mi4syheisqn2wn2n4fsuitpccdackjwxplad.onion) – open n TOR
- Ahmia (juhanurmihxlp77nkq76byazcldy2hlmovfu2epvl5ankdibsot4csyd.onion) – open in TOR
- Haystack (haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion) – open in TOR
- report (hunch.ly)
- What Is the Dark Web and Should You Access It? (investopedia.com)
SCARS Resources:
- For New Victims of Relationship Scams newvictim.AgainstScams.org
- Subscribe to SCARS Newsletter newsletter.againstscams.org
- Sign up for SCARS professional support & recovery groups, visit support.AgainstScams.org
- Find competent trauma counselors or therapists, visit counseling.AgainstScams.org
- Become a SCARS Member and get free counseling benefits, visit membership.AgainstScams.org
- Report each and every crime, learn how to at reporting.AgainstScams.org
- Learn more about Scams & Scammers at RomanceScamsNOW.com and ScamsNOW.com
- Global Cyber Alliance ACT Cybersecurity Tool Website: Actionable Cybersecurity Tools (ACT) (globalcyberalliance.org)
- Self-Help Books for Scam Victims are at shop.AgainstScams.org
- Donate to SCARS and help us help others at donate.AgainstScams.org
- Worldwide Crisis Hotlines: International Suicide Hotlines – OpenCounseling : OpenCounseling
- Campaign To End Scam Victim Blaming – 2024 (scamsnow.com)
-/ 30 /-
What do you think about this?
Please share your thoughts in a comment below!
More ScamsNOW.com Articles
SCARS LINKS: AgainstScams.org RomanceScamsNOW.com ContraEstafas.org ScammerPhotos.com Anyscam.com ScamsNOW.com
reporting.AgainstScams.org support.AgainstScams.org membership.AgainstScams.org donate.AgainstScams.org shop.AgainstScams.org
youtube.AgainstScams.org linkedin.AgainstScams.org facebook.AgainstScams.org
Leave A Comment