Explainer: How the Surface Web, Deep Web and Darknet Differ

· Original article ↗

Summary

An explainer distinguishes the surface web, deep web and darknet, describing how Tor, I2P, ZeroNet, Freenet, Lokinet and Yggdrasil work and why darknet terminology matters to OSINT investigators.

Key points

  • The surface web is generally searchable; deep web content includes databases and sites not indexed by search engines, such as account portals and medical records.
  • Darknets are intentionally hidden anonymous networks that require specialized tools or protocols to access.
  • Tor routes traffic through volunteer-operated servers; I2P uses a distributed peer-to-peer model and garlic routing.
  • ZeroNet and Freenet use peer-to-peer designs; Freenet can store encrypted content fragments across users’ devices.
  • Lokinet uses multi-hop LLARP routing, while Yggdrasil is an encrypted IPv6 mesh network.
  • The article says investigators and organizations may need to account for darknet activity, and notes the risk that Freenet users could unknowingly host illicit content.

Article Details

Topic
Overview of the surface web, deep web, darknet, and examples of anonymous overlay networks

Products

Related Articles