Doxbin (darknet)
Doxbin was an onion service. It was a pastebin primarily used by people posting personal data (often referred to as doxing) of any person of interest.
Not to be confused with with the unrelated clearnet website.Due to the illegal nature of much of the information it published (such as social security numbers, bank routing information, and credit card information, all in plain-text), it was one of many sites seized during Operation Onymous, a multinational police initiative, in November 2014.[1]
History
Doxbin was established by an individual known online as "nachash"[1] to act as a secure, anonymous venue for the publication of a dox. Dox being a term in Internet culture which refers to personally identifiable information about individuals, including social security numbers, street addresses, usernames, emails, and passwords, obtained through a variety of legal and illegal means.[2][1]
In November 2012, Doxbin's Twitter handle @Doxbin was attributed to an attack on Symantec, coordinated with Anonymous' Operation Vendetta.[1]
It first attracted attention in March 2014 when its then-owner hijacked a popular Tor hidden service, The Hidden Wiki, pointing its visitors to Doxbin instead as a response to the maintenance of pages dedicated to child pornography links.[3][4][5] In June 2014, their Twitter account was suspended, prompting the site to start listing the personal information of the Twitter founders and CEO.[6] In October 2014, Doxbin hosted personal information about Katherine Forrest, a federal judge responsible for court rulings against the owner of Tor-based black market Silk Road, leading to death threats and harassment.[2][7]
Doxbin and several other hidden services were seized in November 2014 as part of the multinational police initiative Operation Onymous.[8][9][10] Shortly thereafter, one of the site's operators who avoided arrest shared the site's logs and information about how it was compromised with the Tor developers email list, suggesting it could have either been the result of a specialized distributed denial of service attack (DDoS) or exploited mistakes in its PHP code.[8][9][11][12] However, the site could still be restored easily by setting up a new domain.[13]