IMO the risk here is that onion link lists and search engines can't be trusted. How else are people getting these bogus onions? There's no authority on these "h

IMO the risk here is that onion link lists and search engines can't be trusted. How else are people getting these bogus onions? There's no authority on these "hidden services" and hiding identity is kinda the point of Tor so phishing is easy. Onion addresses are basically hashes of the public key of the hidden service. Trusting only the first few characters for match (for these "vanity onions") to identify the service is just a bad idea...