Search for almost any onion-related keyword and you will find dozens of pages promising a complete list of working links. Most of them were never checked by a person. A few are built specifically to catch you off guard. Here is what actually separates a maintained list from one that just looks like it.
The Business Model Behind Most Link Lists
Most hidden-wiki style pages exist to rank in search results and collect ad revenue, not to keep an accurate index. Looking comprehensive matters more to that business model than being right, so new entries get added faster than old ones get removed. Many of these pages also copy from each other directly, which means one dead or wrong address can spread across dozens of unrelated-looking directories within weeks, each one presenting the same bad information as if it had been independently checked.
Signs a List Was Never Actually Checked
A few details give away a list that nobody has looked at in years. Watch for old-style 16-character addresses, a format Tor retired back in 2021, sitting next to modern 56-character ones as if nothing changed. Watch for the total absence of any last-checked date, or a date that never moves no matter when you visit. Watch for entries copied word for word, typos included, across pages that claim to be run by different people. None of these prove a list is malicious, but together they are a reliable sign it was published once and never revisited.
Red Flags That Point to a Phishing Trap
The more dangerous pages go a step further and build addresses meant to fool you specifically. A listing for a well-known service that does not match the address the operator publishes on its own official site is the clearest warning sign there is. So is a page calling itself an official mirror with no way to actually verify that claim, or a login screen asking for credentials the moment you land on it, before you have done anything. Typosquatted onion addresses that differ from the real one by only a character or two exist specifically to catch people who are moving fast and not checking closely.
A Simple Test Before You Trust Any List
None of this requires special tools. Before you trust an address from any list, cross-reference it against the operator’s own official website rather than taking a single directory’s word for it. If the two do not match, or the organization does not publish an onion address at all, treat that as a reason to stop, not a detail to shrug off. A short list you had to double-check is worth more than a long one you took on faith.