Onion URL

What Is an Onion URL?

An onion URL is a unique web address that ends with ".onion". This address points to an onion service, which is specifically designed to be accessed through the Tor network. Unlike standard web addresses, onion URLs require the Tor Browser for access, which provides anonymity and security by routing your connection through multiple Tor relays, creating a Tor circuit.

Currently, v3 onion addresses contain 56 characters before the ".onion" domain. This format enhances security and reduces the likelihood of phishing attacks. Users should be aware that these addresses are not accessible via traditional web browsers, making the Tor Browser essential for exploration.

It's crucial to differentiate between the dark web and the deep web. The deep web includes all parts of the internet that are not indexed by standard search engines, such as private databases and password-protected websites. An example of the deep web is a medical record database that requires authentication to access. In contrast, the dark web refers to a subset of the deep web that is intentionally hidden and requires specific software, like Tor, to access. An example of the dark web is a marketplace where illicit goods are traded anonymously.

Understanding these distinctions is vital for anyone venturing into the world of onion URLs and the services they provide. Always exercise caution when visiting unfamiliar onion sites, as they can host harmful content.

Verified Onion URLs by Category

We have compiled a directory of verified onion URLs organised by category. Each entry includes the service name, exact v3 URL, purpose, registration requirement, JavaScript requirement, official source, status, and last-checked date. This list prioritises legitimate services to help you navigate the dark web safely.

This directory serves as a starting point for exploring verified onion services. We advise against using unverified links or marketplaces to ensure your safety while navigating the dark web.

How to Use This Onion Link Directory

Navigating our onion link directory is straightforward once you understand the labels associated with each entry. We categorise onion URLs as "verified," "online," "intermittent," and "unverified."

A "verified" label indicates that the onion URL has been confirmed by a trusted source. However, verification does not guarantee consistent availability, as onion services can go offline unexpectedly. The "online" label means that the service is currently accessible, while "intermittent" suggests that it may not always be reachable. "Unverified" indicates that the URL has not been confirmed, and we recommend exercising caution with these links.

When using an onion URL, copy the full 56-character v3 address accurately. It is crucial to compare this with the service's official announcement on the clearnet to ensure you are visiting the correct site. This step helps avoid phishing attempts and harmful content that may mimic legitimate services.

Keep in mind that availability of onion services changes frequently due to various factors, including server issues and maintenance. We display a "Last checked" timestamp with each entry to indicate the most recent verification date. For example, if a URL was last checked on "2023-10-01," this signals the last time we confirmed its status.

By understanding these labels and following our guidelines, you can navigate the dark web more safely and effectively. Always prioritise verified links and be cautious with unverified services to protect your privacy and security.

Onion URL Glossary

Understanding the terminology related to onion URLs and the Tor network is crucial for navigating the dark web safely. Below is a compact glossary of essential terms:

A–Z Glossary

• .onion: A special-use top-level domain suffix used by onion services, only accessible via the Tor network.
• Bridge: A Tor relay that is not listed publicly, helping users bypass censorship and access the Tor network.
• Circuit: The path created by the Tor network through a series of relays that anonymises your internet connection.
• Clearnet: The portion of the internet that is publicly accessible and indexed by search engines, contrasting with the deep web and dark web.
• Dark Web: A subset of the deep web that is intentionally hidden and requires specific software like Tor for access. An example is an illicit marketplace.
• Deep Web: All parts of the internet that are not indexed by traditional search engines, including databases and private websites. An example is a medical records database requiring authentication.
• Exit Node: The final relay in a Tor circuit that decrypts the data and sends it to the clearnet. It is crucial for accessing non-onion websites.
• Onion Service: A website or service that can only be accessed through the Tor network using an onion URL. It provides anonymity to both users and operators.
• Relay: A server that forwards data between users and onion services within the Tor network, enhancing security and privacy.
• SecureDrop: An open-source platform that allows whistleblowers to securely submit documents and communicate with journalists via onion services.
• v3 Address: The latest format of onion addresses that are 56 characters long, enhancing security and reducing phishing risks.

Examples of Common Confusions

The dark web differs from the deep web in that the dark web is intentionally hidden and requires specific software for access, while the deep web encompasses all unindexed parts of the internet.

An onion service is a website that can only be accessed via the Tor network, while an exit node is the point where your data exits the Tor network to reach the clearnet. Understanding these distinctions is essential for safe navigation.

How to Access an Onion URL Safely

To access an onion URL safely, we recommend using the official Tor Browser. Enter the complete .onion address directly into the browser's address bar. This ensures that you are connecting through the Tor network, which is essential for accessing onion services.

While navigating the dark web, it's crucial to adhere to a safety checklist to protect your privacy and security. Here are key points to consider:

1. Verify URLs: Always ensure that the onion URL is correct and matches the official source. A working onion link does not guarantee that a site is trustworthy or legal.

2. Watch for Browser Warnings: If the Tor Browser displays warnings about a site, take them seriously. These warnings are there to protect you from potentially harmful content.

3. Be Cautious with Downloads: Avoid downloading files from unknown onion services, as they may contain malware or other harmful software.

4. Disable Scripts: Many onion services may use scripts that can compromise your security. We advise disabling JavaScript unless absolutely necessary.

5. Avoid Sharing Personal Information: Do not provide any personal information when using onion services. Anonymity is key in the dark web environment.

6. Be Wary of Cryptocurrency Requests: If a site asks for cryptocurrency payments upfront, it could be a scam. Always research any service before making a transaction.

7. Watch for Phishing Attempts: Be alert to phishing sites that mimic legitimate services. Always double-check the URL and look for signs of authenticity.

By following these guidelines, you can enhance your safety while exploring the vast array of onion services available. Remember, a working onion link does not mean the site is legitimate or secure. Always exercise caution and perform due diligence before engaging with any content on the dark web.

How to Verify an Onion Link and Spot a Fake

Verifying an onion link is essential for ensuring your safety while navigating the dark web. Start by checking the organisation's official clearnet website for any announcements or documentation regarding their onion service. If available, this is the most reliable source. Next, consult the Tor Project's official resources, which provide guidance on accessing onion services securely. Following these, reputable directories can be useful, but they should be approached with caution.

Consider two hypothetical lookalike addresses: example1.onion and exampl1.onion. A one-character difference can indicate a phishing attempt, where malicious actors create similar-looking URLs to deceive users. Always double-check the full 56-character v3 address against the official source before proceeding.

Avoid trusting shortened URLs or screenshots that might misrepresent the actual service. Random forum posts can also be misleading, as they often lack verification. Directories that do not display sources or check dates are particularly risky; they might lead you to outdated or fraudulent links. For instance, if a directory does not indicate when it last verified a link, it could be providing access to a defunct or dangerous site.

By following these verification steps, you can significantly reduce the risk of falling victim to scams and ensure a safer experience while exploring the dark web. Always prioritise verified links and be vigilant against potential threats.

Why Onion Links Stop Working

Onion links can cease functioning for various reasons, which can be frustrating for users. Understanding these causes can help in troubleshooting and navigating the dark web more effectively.

One common reason is address rotation. Many onion services frequently change their URLs to enhance security and privacy, meaning that an old link may no longer work. Additionally, server downtime can occur due to maintenance or unexpected issues. This can temporarily render a service inaccessible, particularly if it is not a well-established onion service.

Another issue is the risk of denial-of-service (DoS) attacks, which can overwhelm a service with traffic, causing it to go offline. Sometimes, the operators of an onion service may decide to shut down their site, either permanently or temporarily, for various reasons.

Users should also be aware of mistyped URLs. Even a small error in entering the address can lead to an inaccessible site. Moreover, obsolete v2 links are an issue; these 16-character addresses have been deprecated in favour of more secure 56-character v3 addresses. As a result, any directory listing old v2 links is outdated and should not be relied upon.

For troubleshooting, we recommend a straightforward flow: first, recheck the address for typos. Next, confirm the official source of the onion URL to ensure it is current. If the link still does not work, try again later, as the service may be temporarily down. Never substitute an unverified mirror, as this can lead to phishing or other malicious activities. By following these steps, users can navigate the challenges of accessing onion services more effectively.

Common Mistakes and Misconceptions

Treating availability as proof of authenticity

A page loading successfully only confirms that an onion service is responding, not that it belongs to the claimed organisation. Lookalike operators may reproduce branding, login forms, and payment instructions, so we treat service status and identity verification as separate checks.

Assuming every directory entry is current

Users often bookmark directory pages and return without checking when each entry was reviewed. This can expose them to abandoned addresses, changed ownership, or unofficial replacements; we advise using directories that disclose their checking method, status date, and verification source.

Believing Tor makes every action anonymous

Tor routes network traffic, but it cannot prevent users from revealing their identity through accounts, personal details, downloads, or payment behaviour. We recommend treating browser configuration and operational habits as separate from the privacy protection provided by the network.

Thinking onion traffic uses an exit node

Exit nodes are relevant when Tor users connect to ordinary clearnet destinations. Connections to onion services remain within the Tor network, so advice about exit-node monitoring does not describe how direct onion-service access works.

Using "deep web" and "dark web" interchangeably

The deep web includes ordinary unindexed resources such as private portals and account pages, while the dark web refers to intentionally hidden services requiring specialised access. Mixing these terms leads users to apply onion-specific risks and precautions to unrelated private web content.

Replacing a failed address with the first mirror found

When an established address stops responding, users may search forums or directories for a convenient substitute. An unofficial mirror can be a phishing copy, so we advise waiting for a service update or confirming any replacement through the organisation’s recognised publication channels.

Conclusions

• An onion URL identifies a Tor-only destination; it does not establish who operates the service or whether its content is lawful.
• Our first action should be to obtain the address from the operator’s recognised publication channel, then compare every character before opening it.
• If a service is unavailable, recheck the address and wait for an operator update rather than selecting an unofficial replacement.
• We should keep browsing behaviour separate from network privacy: accounts, files, payments, and disclosed details can still reveal identity.
• Treat directory entries as starting points that require independent confirmation, especially when they lack a review date or verification method.

Next, read Tor Link Onion to organise your access and address-checking process.