Scalable darkweb analytics are provided by crawling content offered by a plurality of onion services; sanitizing the content from each onion service of the plurality of onion services into sanitized content that represents potentially malicious content in a non-malicious form; storing, in a database, the sanitized content in association with a unique identity for each onion service of the plurality of onion services; receiving a request for information related to a given onion service of the plurality of onion services; and providing, in response to the request, the information based on the sanitized content