DarkScan

How to verify an onion link

Full-string checklist for researchers — October 2026.

Clone operators win when you skim the first dozen characters. Verification is a procedure — not a vibe.

1. Full-string comparison

Compare the entire v3 onion (56 characters before .onion) against a string saved from DarkScan’s verified vault or a market-link page on this desk. Prefix matches are not enough.

2. Watch 0/O and l/1 swaps

Phishing kits swap visually similar characters in the middle of the string while keeping a familiar start. Read in a monospace block; do not trust logos.

3. PGP / canary before password

If the market publishes a canary or anti-phishing phrase, confirm it before typing a password. Import keys from a known prior source — never from the suspect page itself. See PGP notes.

4. Never from ads or DMs

Bing exact-match ads, Telegram “support,” and “new mirror after downtime” chats are hostile until proven otherwise. Clearnet hubs redistribute; they are not login pages.

5. Keep a second mirror

One bookmark is not redundancy. Save at least two onions from the same market page.