Security

The market is built around the fact that phishing, not exit scams, is how most people lose money here. The login captcha renders the real onion into the image, so you can hold what you typed against what the server printed. The onion reprints in the page header. The mirror list is signed with a key you can verify. No single defence is complete, and together they make a convincing clone expensive to run.

See also the security topic, which generalises this pattern to every entry.