Tor2Web Proxies Are Using Google Analytics to Secretly Track Users

Caleb
Caleb
Sep 30, 2018 · 8 min read
Bullshit loading alongside Dream Market when loaded through a Tor2Web proxy

Onion.rent

2pjwzzms2yqlrkhp.onion is surprisingly a real Dream Market address
Wait… The two addresses don’t match…

fenuqthznfkq5mry.onion is the address I set up for testing. I have since pulled it.

Onion.pet

The Tor2Web Test Page with AddToAny Share Buttons

Onion.ws

<!-- Global site tag (gtag.js) - Google Analytics --> 
<script async src="https://www.googletagmanager.com/gtag/js?id=UA-123404068-1"></script>
<script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);}
gtag('js', new Date());
gtag('config', 'UA-123404068-1');
</script> </html>

Onion.nz


Onion.link

<noscript>
<a href=”https://main.exosrv.com/img-click.php?idzone=2935598" target=”_blank”>
<img src=”https://syndication.exosrv.com/ads-iframe-display.php?idzone=2935598&amp;output=img&amp;type=468x60" width=”468" height=”60"/></a>
</noscript>

Tor2Web.xyz


Onion.to

Standard Tor2Web homepage.
This is what Tor2Web proxies /should/ be doing.

Darknet.to


Onion.nu

Tor2Web.ch

Onion.moe

Onion.gg

Onion.sh

tor2web.io

onion.rip

Caleb

Written by

Caleb

Non-academic cryptomarket research. Infosec. Darkweb drug markets. Occasionally worthwhile information.

Welcome to a place where words matter. On Medium, smart voices and original ideas take center stage - with no ads in sight. Watch
Follow all the topics you care about, and we’ll deliver the best stories for you to your homepage and inbox. Explore
Get unlimited access to the best stories on Medium — and support writers while you’re at it. Just $5/month. Upgrade