Skip to content

Onion Service

Definition

A Tor-based server reachable only through the Tor network via a .onion address derived from the service's public key. The routing protocol conceals the server's IP address from users and the user's IP address from the server, making physical location identification a primary investigative challenge.

Address format
.onion, derived from the service's public key
Access route
Only through the Tor network
Concealment
Hides server IP from users and user IP from server

Common questions

Why is locating a dark web marketplace's server so difficult?+

The onion service protocol routes connections through rendezvous points inside Tor so that neither the visiting client nor the server ever exchanges IP addresses directly, removing the usual network trail investigators rely on.

What investigative approaches work against onion services despite this?+

Common methods include exploiting server-side misconfigurations or vulnerabilities, tracking cryptocurrency payment trails, undercover purchases, and, in some documented cases, correlating traffic timing across cooperating network vantage points.

Related terms

Blockchain Analytics
The use of tools such as Chainalysis, Elliptic, or CipherTrace to trace cryptocurrency fund flows across a public ledger. Because most public...
Bulletproof Hosting
Hosting providers, typically in jurisdictions with weak law enforcement cooperation, that explicitly or implicitly ignore takedown requests and abuse complaints. Dark web...
Escrow Wallet
A cryptocurrency address controlled by the marketplace that holds a buyer's payment until the buyer confirms receipt. Escrow wallets create an auditable...
Mutual Legal Assistance Treaty (MLAT)
A bilateral or multilateral treaty under which signatory states agree to assist each other in gathering evidence for criminal investigations. MLATs define...
Operational Security (OPSEC)
The set of practices a threat actor uses to prevent adversaries from identifying them or their infrastructure. In dark web investigations, OPSEC...

Explained in

Your journey to becoming a forensic professional starts here.

Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.