I half expected them to be using google forms.

I'm not sure I think this is totally sensible.

It might be fine if Dark Web stuff is popular in relevant countries such Russia, and the prospective spy can pretend that he was only trying to buy drugs or something, but I think the interesting thing would be to leverage mainstream websites, i.e. big things-- Google, news.bbc.co.uk, etc.