Skip to content

Dark Web related links

Emrah Alpa edited this page Jul 8, 2026 · 60 revisions

Welcome to the DarkWeb wiki!

This page lists the dark web-related links I have used in my research into stealer logs and other ransomware-related information.

This is for research purposes only, to arm the defenders with the necessary information on what is available on the publicly-accessible dark-web, so they can make an informed decision.

I do not recommend visiting these sites unless you have taken the necessary security and anonymity precautions. Visit these links at your own risk.

Now, let's dive in.


Short link to reach this page


TRAINING LINKS

Harun Seker's Start.ME pages

SOCRadar Labs - Free Tools

Mastering Threat Intelligence Platforms


SURFACE WEB LINKS

Telegram Channel Search (added on 2026.04.09)

Telegram channel search

Infostealers on Telegram Channels (Links Index)

Telegram Anonymity Related

Alternative Way to Get an SMS/SIM card (for Anonymous Telegram access)

Search Engines for Cybersecurity Professionals

OSINT, Forensics and Privacy-focused Virtual Machines

Ransomware and Related News

Listing of Ransomware groups' Active Data Leak Sites (DLS)


Dark Web - Search engines

Ahmia

Dark Hunt Search Engine

Torch Search Engine

Dark Web - Daily News

Daily Dark Web


Dark Web - Others

APT IRAN

Breach Forums

updated on 2026.05.08

updated on 2025.10.24 Hey, just wanted to give you a heads-up that BreachForums is back up. The new domain is breached.sh - it's being run by the old mod "koko" from 2023-2024. They've got the official databases restored but all the old threads aren't there, so it's a fresh start. Figured this would be relevant for you. Here's their announcement thread: https://breached.sh/Thread-IMPORTANT-READ-BreachForums-Reinstated And the onion site: http://ujdswnhjybusy2i4vcsfpkezrtg27glkxu3t5b4ttszhxyqaz3gpkbyd.onion/

Older BreachForums Data (for archive purposes)

Dark Forums

Everest Group Ransomware Threat Actor Data Leak Site / DLS

Lockbit7 Ransomware TA DLS Site

The Gentlemen Ransomware RaaS TA DLS Site

  • tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion

Shiny Pog Leaks [Alledgedly, belongs to ShinyHunters Ransomware Threat Actor Group] / DLS

Payload TA DLS

Probiv Russian Hacking and Discussion Forum

Hunters Ransomware TA DLS

El Dorado Ransomware TA

Lockbit3 Ransomware TA

Lockbit Ransomware TA

Qilin Ransomware TA

http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion http://kg2pf5nokg5xg2ahzbhzf5kucr5bc4y4ojordiebakopioqkk4vgz6ad.onion http://nj5lfmji6svckid5tzwd7rc3jg3gnzaoswsmqtea7n3lm2qy5yndlyad.onion http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion http://nmmzaxo5x64zmhkqcowocfzvigss7pjrs27a6u4bxsd7qcsw2tuoyuqd.onion

Conti Ransomware TA

New Page

Cl0p Leaks [Ransomware Threat Actor Group]

SafePay [Ransomware Threat Actor Group]

R Hysida

Akira

Altenens

Leakbase

Lynx (Ransomware TA related to FortiBleed campaign)

Russian Market (English language) [Dark Web]

Russian Market (English language) [Surface Web]

XSS Forums (Russian) [Dark Web]

XSS Forums (Russian) [Deep Web] - Down as of 2025.07

XSSF Forum (Russian) [Dark Web]

Exploit.in Dark Web Market/Forum (Russian) [Dark Web]

Exploit.in Dark Web Market/Forum (Russian) [Deep Web]

BHF Forums (Russian) [Deep Web]

Omega Lock

Rent a Hacker

PGP Shop

Exodus Market [Dark Web]

Exodus Market [Telegram Channel]

Exodus Market [Deep Web]

Cash Cow Marketplace

Black Market Guns [Dark Web]

Peoples Drug Store

The Hidden Wiki

Acc Market - credit cards

Secrets Box

Email database - LinkedIn passwords

Links Index 1 - CL0P, Haystack, etc...

Links Index 2 - Torch, etc...

Other #1

RG Leaks

The New York Times

SecureDrop

Massimo Giaimo | @FastFire | Cyber Security Team Leader @ Würth


OTHER SOURCES MENTIONED IN MY PRESENTATIONS

Verizon 2024 Data Breach Investigation Report

Gartner: How to Prepare for Ransomware Attacks

Information Is Beautiful: World’s Biggest Data Breaches & Hacks

SnowFlake Case Study

Links to Come Soon

  • Gothamfx
  • CIA
  • SecureDrop

Washington Post- SecureDrop

Taken down dark web service:

  • rgleaktxuey67yrgspmhvtnrqtgogur35lwdrup4d3igtbm3pupc4lyd.onion

DLS Explanation

Oceans + Titanic

How Infostealers have evolved

LummaC2 Infostealer's Evasion Techniques

XDR Example

ITDR Example

NDR Example


OSINT / FREE SEARCH FORENSICS TOOLS

DNPedia - Recently Issued SSL/TLS Certificates

Shodan

ZoomEye

BinaryEdge

CenSys

SOCRadar Free Tools

MISP CIRCL

AlienVault

LeakCheck

Have I Been Pwned?

PhishTank

OpenPhish

DNSTwist

Ensar Seker (top voice)

SANS 2024 OSINT Summit YouTube Playlist

Free Online Network Tools


RANSOMWARE FOCUS

SOCRadar's Top Ransomware Voice - Ensar Seker

Free Ransomware Simulator (similar to ChatGPT AI engine)

Useful Ransomware Trackers


AI, ChatGPT, LLM's

AI Engine - Raccoon OSINT Hunter

Clone this wiki locally