dark web service provider vulnerability