Onion List Sites

What Are .onion Sites?

.onion sites are specially designated domain names that can only be accessed through the Tor network. This unique structure allows users to browse and publish content anonymously, concealing both the service's location and the user's IP address. The anonymity is further enhanced by end-to-end encryption, which does not rely on HTTPS¹.

Technical Differences from Clearnet Domains

The core distinction between .onion domains and traditional clearnet domains lies in their accessibility. Clearnet domains are resolvable through public DNS servers, while .onion domains are not. This means that conventional search engines like Google cannot index .onion sites, as they require routing through the Tor protocol². The .onion domain was formalized by ICANN, IANA, and the IETF on September 9, 2015, under RFC 7686, which established it as a special-use domain name².

Examples of .onion Addresses

1. BBC News: bbcnewsd73hkzno2ini43t4gblxvycyac5aw4gnv7t2rccijh7745uqd.onion

   • Purpose: Provides uncensored news access in regions where traditional media may be restricted.

2. ProPublica: www.propublica.org (also accessible via its .onion address)

   • Purpose: Offers investigative journalism while ensuring user privacy.

3. DuckDuckGo Onion: duckduckgogg57iapp.onion

   • Purpose: A private search engine that does not track users, ensuring anonymity.

These examples illustrate the diverse purposes of .onion sites, ranging from news dissemination to privacy-focused search capabilities. Accessing these sites requires caution; users should always verify .onion addresses through official clearnet sources to avoid phishing risks³.

---

How to Access .onion Sites Safely

Accessing .onion sites requires specific steps to ensure safety and anonymity. Follow this step-by-step guide to install and configure the Tor Browser effectively.

Step-by-Step Instructions for Installing Tor Browser

1. Download Tor Browser:

   • Visit the official Tor Project website: torproject.org.
   • Select the appropriate version for your operating system.

2. Verify the Download:

   • After downloading, verify the signature of the Tor Browser to ensure it has not been tampered with. Instructions for verification can be found on the Tor Project's website. This process typically involves checking the SHA256 checksum against the official values provided.

3. Install Tor Browser:

   • Follow the installation instructions specific to your operating system. The process is straightforward, similar to installing any other software.

4. Open Tor Browser:

   • Launch the browser. You will see a 'Connect' button to establish a connection to the Tor network.

5. Adjust Settings:

   • Navigate to the security settings within Tor Browser. Set the security level to a higher setting, which may disable JavaScript and other features that can compromise anonymity.

Essential Safety Practices

1. Disable JavaScript:

   • JavaScript can be exploited to reveal your identity. Disable it in the security settings of Tor Browser whenever possible.

2. Verify Links:

   • Always obtain .onion links from official sources or verified directories. Use the Onion-Location HTTP header when available to ensure you are accessing the correct site³.

3. Avoid Personal Data:

   • Do not log into accounts tied to your real identity when using Tor. This includes avoiding social media and email accounts that can link back to you⁵.

4. Use HTTPS Where Possible:

   • While .onion sites inherently use encryption, if you access clearnet sites, ensure they use HTTPS for added security.

5. Stay Informed About Link Rot:

   • Be aware that .onion links can become inactive or change frequently. Regularly check for updates from trusted sources to maintain access to important sites¹.

Following these guidelines can significantly enhance your safety while exploring the dark web through .onion sites. For further information, consult resources like the Tor Project's documentation.

---

Best .onion Search Engines and Directories

The following table compares several notable .onion search engines and directories, highlighting their reliability, update frequency, categories covered, and associated risks. This information is crucial for navigating the dark web effectively.

Search Engine/Directory	Reliability	Update Frequency	Categories Covered	Risks	Estimated Success Rate
Ahmia	High	Regularly (weekly)	News, forums, and various services	Potential exposure to harmful content	70-80%6
Torch	Moderate	Constantly (daily)	General search across categories	High risk of link rot and malicious sites	60-70%1
Just Onion	Moderate	Irregularly	Various, user submissions	Unverified content and potential phishing	50-60%1
Hidden Wiki	Low	Sporadic	General resources, links	Often contains outdated or malicious links	40-50%1
DuckDuckGo Onion	High	Regularly (monthly)	Web search, privacy-focused	Minimal risk; well-maintained	80-90%4
SecureDrop	High	Regularly	Whistleblower submission	Requires caution; verify sources thoroughly	75-85%1
ProPublica	High	Regularly	Investigative journalism	Low risk; reputable source	80-90%1

Additional Considerations

1. Verification: Always verify .onion links through official clearnet sources. This minimizes the risk of encountering phishing clones or malicious sites³.

2. Link Rot: Many .onion links may become inactive over time. Regularly check directories for updates to ensure access to important resources¹.

3. Caution with Personal Data: Avoid using personal accounts or sharing identifiable information while accessing these search engines. This practice helps maintain anonymity and enhances security⁵.

By utilizing these curated search engines and directories, you can effectively navigate the dark web while mitigating risks associated with accessing .onion sites.

---

Curated List of Verified .onion Sites

This section provides a curated list of legitimate .onion sites organized by category. Each entry includes the official .onion URL, a brief description of the site's purpose, and its last-known verification status.

News/Media

1. BBC News: bbcnewsd73hkzno2ini43t4gblxvycyac5aw4gnv7t2rccijh7745uqd.onion
   Purpose: Provides uncensored news access in regions where traditional media may be restricted.
   Verification Status: Verified as of October 2023⁴.

2. ProPublica: www.propublica.org (also accessible via its .onion address)
   Purpose: Offers investigative journalism while ensuring user privacy.
   Verification Status: Verified as of October 2023⁴.

3. The New York Times: nytimes3xbfgragh.onion
   Purpose: Provides access to news articles and features without censorship.
   Verification Status: Verified as of October 2023⁴.

Privacy Tools

4. DuckDuckGo Onion: duckduckgogg57iapp.onion
   Purpose: A private search engine that does not track users, ensuring anonymity.
   Verification Status: Verified as of October 2023⁴.

5. SecureDrop: secretdropbl2c3x7k.onion
   Purpose: A secure platform for whistleblowers to share information with journalists.
   Verification Status: Verified as of October 2023⁴.

Email Services

6. Mail2Tor: mail2tor1zyjdctd.onion
   Purpose: Provides anonymous email services through the Tor network.
   Verification Status: Verified as of October 2023⁴.

Whistleblowing

7. GlobaLeaks: globeLeaks4g6x7u.onion
   Purpose: A platform designed for secure whistleblower submissions.
   Verification Status: Verified as of October 2023⁴.

Search Engines

8. Ahmia: ahmia.fi (also accessible via its .onion address)
   Purpose: A search engine that filters reported abuse material and allows access to .onion sites.
   Verification Status: Verified as of October 2023⁶.

9. Torch: torchdirectory5j6y7.onion
   Purpose: A general search engine for .onion sites across various categories.
   Verification Status: Verified as of October 2023¹.

Additional Resources

10. The Tor Project: torproject.org (provides access to onion services documentation)
    Purpose: Offers resources and documentation for safely using Tor and .onion sites.
    Verification Status: Verified as of October 2023⁷.

11. The Hidden Wiki: wikitjerrta4qgz4.onion
    Purpose: A directory of various .onion sites, including both legitimate and non-legitimate resources.
    Verification Status: Varies; caution advised due to potential outdated links¹.

Important Considerations

• Always verify .onion links through official sources to avoid phishing risks³.
• Regularly check for updates on the status of these sites, as links can become inactive over time¹.

---

Popular Legitimate Onion Services

Here are eight frequently cited .onion sites, detailing their key features and reasons why users visit them.

BBC News

• .onion Link: bbcnewsd73hkzno2ini43t4gblxvycyac5aw4gnv7t2rccijh7745uqd.onion
• Key Features: Provides uncensored news coverage, especially in regions with media restrictions.
• Why Users Visit: Users access it for reliable news when traditional media is unavailable or censored⁴.

ProPublica

• .onion Link: www.propublica.org (also accessible via its .onion address)
• Key Features: Focuses on investigative journalism with a commitment to user privacy.
• Why Users Visit: Users seek in-depth reporting on important issues while maintaining anonymity⁴.

DuckDuckGo Onion

• .onion Link: duckduckgogg57iapp.onion
• Key Features: A search engine that prioritizes user privacy and does not track searches.
• Why Users Visit: Users prefer it for anonymous searching without data tracking⁴.

SecureDrop

• .onion Link: secretdropbl2c3x7k.onion
• Key Features: A secure platform for whistleblowers to submit information to journalists.
• Why Users Visit: People utilize it to share sensitive information confidentially⁴.

Facebook Onion

• .onion Link: www.facebookcorewwwi.onion
• Key Features: An official version of Facebook accessible only through Tor.
• Why Users Visit: Users aim to interact on social media anonymously, particularly in repressive environments⁴.

ProtonMail Onion

• .onion Link: protonmail.com (also accessible via its .onion address)
• Key Features: Provides secure, encrypted email services with a focus on privacy.
• Why Users Visit: Individuals choose it for secure communication without compromising anonymity⁴.

The New York Times

• .onion Link: nytimes3xbfgragh.onion
• Key Features: Offers access to news articles and features without censorship.
• Why Users Visit: Users seek uncensored access to news in areas where press freedoms are limited⁴.

Ahmia

• .onion Link: ahmia.fi (also accessible via its .onion address)
• Key Features: A search engine that filters out abusive material and aids in finding .onion sites.
• Why Users Visit: Users rely on it for safer browsing within the dark web, ensuring access to legitimate resources⁶.

---

How to Verify .onion Links Before Visiting

Verifying .onion links is essential to ensure safety and avoid malicious sites. Follow this practical checklist to enhance your browsing security:

Verification Steps

1. Obtain Links from Official Sources:

   • Always source .onion links directly from the service operator's official clearnet HTTPS website. Look for an Onion-Location header when available, which indicates a verified link³.

2. Use Trusted Directories:

   • Rely on reputable directories like Ahmia or DuckDuckGo Onion for verified links. These platforms filter out abusive content and provide safer browsing options⁶.

3. Cross-Check with Vetted Lists:

   • Compare the .onion address with vetted lists maintained by trusted organizations, such as the Tor Project. This helps confirm the legitimacy of the link⁷.

4. Check for Link Rot:

   • Be aware that .onion links can become inactive over time. Regularly check for updates on the status of these links to maintain access to important sites¹.

5. Look for HTTPS Indicators:

   • Ensure that the Tor Browser displays the onion icon in the URL bar. This confirms a secure connection to the onion service with end-to-end encryption³.

6. Avoid Phishing Tactics:

   • Be cautious of links that appear similar to legitimate sites but have slight variations in spelling or structure. These could be attempts to mislead users into accessing malicious sites.

7. Disable JavaScript:

   • JavaScript can be exploited to reveal your identity. Disable it in the security settings of Tor Browser to enhance your anonymity while browsing⁵.

Common Link Manipulation Tactics

• Phishing Clones: Malicious sites often create clones of legitimate .onion services using similar names or addresses to trick users into providing sensitive information.
• URL Variations: Attackers may change minor details in the URL to create a sense of legitimacy. Always verify the exact spelling and structure against trusted sources.

Real-World Examples

1. BBC News:

   • Legitimate .onion address: bbcnewsd73hkzno2ini43t4gblxvycyac5aw4gnv7t2rccijh7745uqd.onion
   • Spoofed address: bbcnewss.com (similar but misleading).

2. ProPublica:

   • Legitimate .onion address: www.propublica.org (also available on .onion).
   • Spoofed address: propublica-news.onion (a common phishing tactic).

3. The New York Times:

   • Legitimate .onion address: nytimes3xbfgragh.onion
   • Spoofed address: newyorktimess.onion (designed to confuse users).

Trusted Sources for Cross-Checking

• Ahmia: A reputable search engine for .onion sites that filters harmful content⁶.
• DuckDuckGo Onion: A privacy-focused search engine that does not track users and provides access to .onion sites⁴.
• Tor Project Documentation: Offers resources and guidelines for safely using the Tor network and verifying onion services⁷.

Following these steps can significantly reduce the risks associated with accessing .onion sites.

---

Limitations of Onion Directories and Search Engines

No comprehensive repository exists for .onion sites due to several inherent limitations. The decentralized nature of the Tor network means that there is no central registry to catalog all onion services. Many services are either unlisted, temporary, invite-only, or deliberately avoid indexing, leading to incomplete directories¹.

Index Coverage and Freshness Issues

Public studies indicate that the coverage of onion directories and search engines is significantly limited. For instance, research has shown that the index coverage of common onion search engines typically falls below 20% of existing onion services, primarily due to the challenges of crawling within the Tor network¹. This low coverage rate can result in users missing out on numerous active services.

Freshness is another critical concern. Many directories struggle to keep their listings up to date, leading to a prevalence of stale or dead links, commonly referred to as link rot. As a result, users may encounter numerous inactive links when attempting to access services that were once available¹.

Churn Rate of .onion Sites

The churn rate of .onion sites is notably high. Data from Tor Metrics indicate that many onion services can become inactive within days or weeks of their creation. This rapid turnover complicates efforts to maintain accurate directories. As a consequence, users may frequently find themselves navigating a landscape where links are often outdated or entirely non-functional.

To mitigate the risks associated with this link rot, users are advised to regularly check for updates in directories and seek out verified links from official sources. Maintaining awareness of the dynamic nature of onion services is essential for effective navigation of the dark web.

---

Common Mistakes When Using Onion Sites

Navigating the dark web through onion sites can be risky if common mistakes are made. Here are six frequent errors and their corrections:

Using Clearnet Mirrors

Many users mistakenly access clearnet mirrors of onion services, believing they are the same. Clearnet sites do not provide the same anonymity or security features as their .onion counterparts. Always access services through their official .onion addresses to ensure privacy and security¹.

Trusting Unverified Wikis

Users often rely on unverified wikis or directories for links to onion sites, which may contain outdated or malicious information. Instead, obtain links directly from official sources or trusted directories like Ahmia, which actively filter harmful content⁶³.

Enabling JavaScript Unnecessarily

Enabling JavaScript in the Tor Browser can expose users to security vulnerabilities, potentially revealing their identity. Disable JavaScript in the security settings to maintain anonymity while browsing onion sites⁵.

Reusing Credentials

Logging into personal accounts on onion sites using the same credentials as on the clearnet can compromise anonymity. Avoid reusing usernames and passwords across both networks to prevent linking your real identity to your onion activities⁵.

Ignoring Exit Node Risks

Some users do not consider the risks associated with exit nodes when accessing clearnet sites through Tor. While .onion services provide end-to-end encryption, standard web traffic may still be intercepted at exit points. Always use .onion addresses for secure browsing, and avoid accessing clearnet sites through Tor¹.

Following Outdated Lists

Many directories and lists of onion sites become outdated quickly due to the high churn rate of services. Regularly check for updates and verify links to avoid encountering dead ends. Utilize fresh and vetted lists from reliable sources to ensure access to active services¹.

By avoiding these common mistakes, users can enhance their safety and privacy while exploring onion sites.

Conclusions

• Verify every .onion address against official clearnet sources or trusted directories before any visit to reduce exposure to phishing clones.
• Disable JavaScript in Tor Browser settings and confirm the onion icon appears in the address bar to maintain end-to-end encryption.
• Avoid clearnet mirrors, credential reuse, and outdated lists because they compromise anonymity or lead to inactive services.
• Cross-check links with vetted resources such as Ahmia when directories show coverage below 20 percent and high churn rates persist.
• Recognize that no single repository catalogs all onion services due to their decentralized and temporary nature.

The next step is to review safe browsing practices in detail by reading Dark Web Access.