22 octobre 2024 réseau tor 3 min de lecture

Moteurs de recherche et sites onion : comment la découverte fonctionne réellement

Type an .onion address into Google and you get nothing. Not a 404, not a "no results" - just silence. The clearnet web's most powerful discovery machines are blind to an entire parallel ecosystem, and that blindness shapes how people actually find things on tor.

Why the big engines stay out

Indexing an onion site requires crawling it, which means running a tor client at scale, which means your crawler's traffic is indistinguishable from any other visitor. Google could technically do it. It chooses not to: the legal risk, the abuse surface and the near-zero advertising value make onion indexing a pure liability for a company that monetizes search. So discovery falls to a different breed of engine. Ahmia, a project born from a Finnish researcher's master's thesis, crawls onion services and - unusually - exposes its index on the clearnet too. Torch, one of the oldest, has been crawling since the Silk Road era from a server that has outlived most of what it indexes.

What crawlers can actually reach

Onion crawling is hard in ways clearnet crawling is not. There are no backlink graphs worth trusting, no sitemaps, no webmaster tools. A crawler follows links from directories and link lists, times out constantly, and indexes a lot of dead addresses. The coverage of even the best onion search engine is a fraction of what the name "search engine" suggests. Worse, the indexes age badly. Services vanish overnight, and a result set is often a museum. Research on onion crawlers has repeatedly found that a large share of indexed addresses no longer respond - which is exactly why a live status check belongs next to every search result.

The phishing layer on top

Onion search results are also a favorite hunting ground for scammers. Fake mirrors of well-known services buy or hack their way into indexes and link lists, then harvest logins from anyone who arrives trusting the search engine instead of verifying the address. The engine is a discovery tool, never an endorsement.

How to treat search results

The practical rules are boring but effective: treat every result as unverified until the address is confirmed against a primary source, prefer directories that PGP-sign their listings, and never enter credentials into a site you reached through a search engine for the first time. Our address verification guide covers the full checklist. Discovery on tor is a patchwork of volunteers, half-maintained crawlers and community link lists. It works - but it works like a bulletin board, not an oracle. The difference matters every time money is involved.

L’UE rétablit Chat Control 1.0 : le scan des messages revient malgré un vote majoritaire contre

Le Parlement européen n’est pas parvenu à bloquer la relance du régime temporaire et volontaire de scan des messages le 9 juillet 2026 - 314 députés s’y sont opposés, mais le seuil de la majorité absolue n’a jamais été atteint. Alors que les négociations sur le CSAR permanent reprennent en septembre, la bataille du scan et du chiffrement façonne directement l’avenir des outils d’anonymat.

Telegram veut .gram : que se passe-t-il quand l’infrastructure criminelle quitte les onions pour un DNS contrôlé par la plateforme

Telegram a demandé à l’ICANN le domaine de premier niveau .gram, transformant les noms d’utilisateur en domaines résolvables avec des sites générés par IA derrière. Quelques semaines après la suspension de t.me sous pression des sanctions, le geste montre comment l’infrastructure s’éloigne des onion services vers un DNS que les régulateurs peuvent réellement atteindre.

Kimwolf v7 et l’onion codé en dur : comment les botnets ont appris à ne plus craindre les saisies

Le botnet Kimwolf v7 ressuscité résout ses serveurs de commande via l’Ethereum Name Service sur cinq points de terminaison brassés, puis retombe sur un service caché Tor fixe si tous échouent. Une étude de cas sur la raison pour laquelle les onion services restent le canal C2 le plus résistant aux saisies dont disposent les criminels.