On Tor or I2P, many hidden services require a shared secret. A user might post, "Looking for Invite Site T333n txt," meaning they want a plaintext file hosted on a specific hidden service that contains the current registration password.
User Searches Keyword ➔ Malicious SEO Index ➔ Silent Redirection ➔ Malware / Phishing Landing Page Invite Site T333n txt