--- title: "A Beginner’s Guide to the Dark Web for Investigators" canonical: https://scamsnow.com/a-beginners-guide-to-the-dark-web-for-investigators/ type: post author: "" published: 2023-10-01 modified: 2023-10-04 summary: "" organization: "ScamsNOW.com - the Official Magazine of Scams Fraud & Cybercrime" organization_url: https://scamsnow.com/ llms: https://scamsnow.com/llms.txt --- # A Beginner’s Guide to the Dark Web for Investigators # A Beginner's Guide to the Dark Web for Investigators ##### By [Oxana Korzun](https://www.theinvestigator.blog/), CFE, Fraud Expert / Investigations and Risk Management - San Francisco, California ## A Short Instruction On How To Find Information On The Dark Web For OSINT Purposes Many times, an investigation would lead me to the Dark Web. Sometimes it’s to dive into forums and gather intelligence, and other times it would be to check illegal goods markets selling counterfeit products of my clients. Every time I mention that I use the Dark Web, people imagine a really scary place with criminals selling their goods right and left and that people can suffer dire consequences even for trying to open websites there. Other people ask if it’s even legal to access it. It’s not illegal, and the right precautions and tools make it a safe enough place and a source of abundant information not searchable through traditional means. ## Step 1. Get the Tor Browser [The Tor Browser](https://www.torproject.org/) provides access to .onion websites and is pretty good for browsing anonymously. The browser usually opens with the DuckDuckGo search engine which adds an additional layer of protection. It behaves as a regular browser and all surface websites can be open as well. The downside is that Tor is painfully slow. ## Step 2. Install a Virtual Private Network (VPN) VPNs mask users’ IP addresses and add more anonymity. There are many free VPNs, but they limit the number of countries that can be used to hide IPs. They are easy to use and can be activated with a one-click button. Browsers also have VPN extensions. VPNs still can log data so their use doesn’t make users completely anonymous (for example, [Onavo Project](https://www.accc.gov.au/media-release/20m-penalty-for-meta-companies-for-conduct-liable-to-mislead-consumers-about-use-of-their-data#:~:text=The%20Court%20declared%20that%20the,Protect%2C%20including%20Meta's%20commercial%20purposes.), a free VPN, was collecting user data and giving it to Meta, both companies were sued and had to pay $10 million each). Using them also can slow down the browsing process significantly. ## Step 3. Find a List of Websites to visit There is no one centralized place to find all Dark Web websites but many directories try to keep their databases updated. [Hidden Wiki](http://zqktlwiuavvvqqt4ybvgvi7tyo4hjl5xgfuvpdf6otjiycgwqbym2qad.onion/wiki/index.php/Main_Page), [OnionLinks](http://jaz45aabn5vkemy4jkg4mi4syheisqn2wn2n4fsuitpccdackjwxplad.onion/) are popular darknet directories (links to be opened in [Tor](https://www.torproject.org/)). Investigators can also use dark web search engines like [Ahmia](http://juhanurmihxlp77nkq76byazcldy2hlmovfu2epvl5ankdibsot4csyd.onion/) or [Haystack](http://haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion/) (to be opened in [TOR](https://www.torproject.org/)). Many databases haven’t been updated for some time, and new Dark Web sites appear and disappear every day, so aggregators’ data needs to be re-checked. If a website doesn’t open today, it still might work tomorrow. There is a [service](http://darkfailenbsdla5mal2mxn2uz66od5vtzd5qozslagrfzachha3f3id.onion/) to check if the most popular darknet websites are down and find new links when the old ones don’t work. Forums and chats are also great places to find information about the subject. Marketplaces are useful as well, but they contain mostly illegal content. There is also [Hunchly](https://www.hunch.ly/darkweb-osint/), a service I wrote about in my previous [post](https://www.theinvestigator.blog/blog/osint-browser-extensions), that provides a free daily dark report with new websites collected in a spreadsheet. ## Things to Keep in Mind Anonymity is incredibly important on the Dark Web. Using Tor and VPNs doesn’t make it 100% safe. It’s always a good idea to back up your computer data and check for malware and viruses on a regular basis. Some investigators use virtual machines or clean computers just for the Dark Web. Users should never share any information that can unveil their identity including email addresses, usernames, photos, and other easily searchable information. Any data extracted from the darknet can be used in an investigation only after cross-checking and source verification. Criminals, hackers, law enforcement, and tyrannical governments can be all in one space and share fake information. Find more about fraud and investigations in [the Investigator Blog](https://www.theinvestigator.blog/) ## More: - [The Tor Browser (torproject.org)](https://www.torproject.org/) - [Onavo Project (accc.gov.au)](https://www.accc.gov.au/media-release/20m-penalty-for-meta-companies-for-conduct-liable-to-mislead-consumers-about-use-of-their-data#:~:text=The%20Court%20declared%20that%20the,Protect%2C%20including%20Meta's%20commercial%20purposes.) - [The Investigator Blog](https://www.theinvestigator.blog/) - [Fraud’s Dark Matter: The Universe of Scams Most of Us Never Know About (romancescamsnow.com)](https://romancescamsnow.com/dating-scams/frauds-dark-matter-the-universe-of-scams-most-of-us-never-know-about/) - [Darknet Cybercrime is Exploding in Southeast Asia (romancescamsnow.com)](https://romancescamsnow.com/dating-scams/darknet-cybercrime-is-exploding-in-southeast-asia/) - [Hidden Wiki (zqktlwiuavvvqqt4ybvgvi7tyo4hjl5xgfuvpdf6otjiycgwqbym2qad.onion) - open in TOR](http://zqktlwiuavvvqqt4ybvgvi7tyo4hjl5xgfuvpdf6otjiycgwqbym2qad.onion/wiki/index.php/Main_Page) - [OnionLinks (jaz45aabn5vkemy4jkg4mi4syheisqn2wn2n4fsuitpccdackjwxplad.onion) - open n TOR](http://jaz45aabn5vkemy4jkg4mi4syheisqn2wn2n4fsuitpccdackjwxplad.onion/) - [Ahmia (juhanurmihxlp77nkq76byazcldy2hlmovfu2epvl5ankdibsot4csyd.onion) - open in TOR](http://juhanurmihxlp77nkq76byazcldy2hlmovfu2epvl5ankdibsot4csyd.onion/) - [Haystack (haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion) - open in TOR](http://haystak5njsmn2hqkewecpaxetahtwhsbsa64jom2k22z5afxhnpxfid.onion/) - [report (hunch.ly)](https://www.hunch.ly/darkweb-osint/) - [What Is the Dark Web and Should You Access It? (investopedia.com)](https://www.investopedia.com/terms/d/dark-web.asp)