How to verify an .onion address properly before you trust it
An onion address is not a name - it is a public key. One wrong character puts you on a stranger's server. Here is how researchers and operators say to verify it.
Security
43 postsshort, practical notes about not getting phished. no fear mongering, just the checklist.
latest notes
newest firstFake Seizure Banners: When the Law Enforcement Notice Is Part of the Scam
Fake law enforcement seizure banners power exit scams and phishing kits. Inside the AlphV hoax, the anatomy of cloned takedown pages, and the checks that expose a staged raid.
Playpen and the NIT: the FBI hack that rewrote Tor Browser security
In 2015 the FBI ran the Playpen dark web site for 13 days and unmasked over 1,000 visitors with a browser exploit. Here is how the NIT worked.
How to verify PGP signatures step by step: import, check, and spot fakes
A practical walkthrough of PGP signature verification: install GnuPG, import and check keys, verify detached and clearsigned messages, and avoid common beginner mistakes.
Why phishing mirrors work: the psychology and mechanics behind the darknet's most reliable scam
Fake mirrors steal logins and deposits because they exploit urgency, brand trust, and poisoned link lists. Here is how the trick works and which habits defeat it.
Clipboard hijackers: the silent malware that swaps your crypto address
Clipboard hijackers watch for copied crypto addresses and swap them in milliseconds. Why glancing at the first and last characters is no longer enough.
Address poisoning explained: how lookalike addresses drain crypto wallets
Address poisoning seeds your transaction history with lookalike wallet addresses and waits for one careless copy-paste. How the scam works, what victims lost, and why saved address books win.
One Wrong Character: How Onion Typosquatting Sends Users to Impostor Servers
Change a single character in a .onion address and Tor connects you to a completely different server. We review documented lookalike campaigns and the verification habits that hold up.
The Padlock on Onion Sites: What HTTPS Certificates Really Mean for .onion
A padlock on an .onion site means something different than on the clearnet. We look at what TLS adds to onion services, and what Tor already does without it.
Fingerprinting in Tor Browser: What Still Leaks and What Does Not
Tor Browser blocks most fingerprinting by making everyone look identical. Here is what the uniformity defense covers, what still slips through, and how users wreck it.
Captchas on hidden services: convenience bought at a privacy price
Onion operators lean on captchas to survive DDoS waves, but third-party challenges can leak visitor data and break anonymity. Here is how to weigh the trade-offs.
One Account, One Password: Why Credential Reuse Keeps Killing Market Logins
Most compromised accounts fall to reused passwords, not exploits. How old dumps fuel modern takeovers, what NIST actually recommends, and how to build logins that survive.