Doxbin is a document-sharing website used primarily for the practice of doxing — the act of searching for and publishing private or identifying information about an individual on the internet. The platform functions as a repository where users can upload text files, images, and links containing personal data such as names, addresses, phone numbers, and social media profiles. Doxbin operates both on the clearnet (the standard internet) and as an onion service via the Tor network, providing an onion URL to enhance anonymity for its users and ensure resilience against censorship and Distributed Denial of Service (DDoS) attacks.

History and functionality

Doxbin emerged in the mid-2010s, following the rise of various internet subcultures that utilized doxing as a tool for both social commentary and targeted harassment. Unlike general-purpose “paste” sites such as Pastebin, Doxbin was specifically architected to facilitate the organization and storage of “doxes” — collections of data points pertaining to specific individuals or groups.

The site’s technical architecture allows users to create profiles, upload various media types, and categorize information. This specialization made it a central hub for different internet demographics, ranging from gaming communities and political activists to “trolls” and members of hacktivist collectives like Anonymous. While many of these groups used doxing for investigative or political purposes (such as exposing the locations of public figures), the platform’s lack of strict moderation often led to its use for more chaotic or malicious forms of social harassment.

Controversies and technical evolution

Throughout its existence, Doxbin has been a frequent target of both technical and regulatory challenges. Because the content hosted on the site can be highly controversial — often involving the exposure of private individuals who did not consent to being documented — the platform has faced constant pressure from Internet Service Providers (ISPs) and web hosts.

DDoS attacks and domain shifts

A recurring theme in Doxbin’s history is its susceptibility to DDoS attacks. Various internet subcultures have frequently targeted the site to either “defend” individuals who were being doxed or to disrupt the platform entirely. To counter these attacks and avoid total censorship on the clearnet, the service has undergone numerous domain shifts. This includes moving between various top-level domains (TLDs) and increasingly relying on its onion URL via the Tor network. The transition to an onion service allows Doxbin to maintain availability even when its clearnet mirrors are blocked by DNS filtering or taken down by hosting providers.

Content and moderation

The platform is frequently criticized for its minimal moderation policies. While this provides a high degree of freedom for users to share data, it has also led to significant public backlash. Critics argue that the site facilitates “cyber-mobbing,” where large groups of users target a single individual, often leading to real-world consequences such as social isolation or physical relocation.

Unlike many darknet marketplaces that were dismantled by major law enforcement actions (such as Operation Onymous), Doxbin has largely avoided total seizure by maintaining a decentralized and highly mobile technical presence. Its continued operation through various mirrors and onion services highlights the difficulties of regulating specialized document-sharing platforms that exist on the periphery of the standard web.