Tor2Web Proxies Are Using Google Analytics to Secretly Track Users

Sep 30, 2018 · 8 min read
Bullshit loading alongside Dream Market when loaded through a Tor2Web proxy

2pjwzzms2yqlrkhp.onion is surprisingly a real Dream Market address
Wait… The two addresses don’t match…

fenuqthznfkq5mry.onion is the address I set up for testing. I have since pulled it.

The Tor2Web Test Page with AddToAny Share Buttons

<!-- Global site tag (gtag.js) - Google Analytics --> 
<script async src=""></script>
<script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);}
gtag('js', new Date());
gtag('config', 'UA-123404068-1');
</script> </html>

<a href=”" target=”_blank”>
<img src=”;output=img&amp;type=468x60" width=”468" height=”60"/></a>

Standard Tor2Web homepage.
This is what Tor2Web proxies /should/ be doing.


Written by


Non-academic cryptomarket research. Infosec. Darkweb drug markets. Occasionally worthwhile information.

Welcome to a place where words matter. On Medium, smart voices and original ideas take center stage - with no ads in sight. Watch
Follow all the topics you care about, and we’ll deliver the best stories for you to your homepage and inbox. Explore
Get unlimited access to the best stories on Medium — and support writers while you’re at it. Just $5/month. Upgrade