A3 // Onion address to a clearnet gateway

A gateway is not a shortcut to the market. It is a machine that reads your entire session in exchange for saving you an install.

Awazon Market // onion addresses

The three strings below open the same market. The same account, the same balance, the same open orders sit behind each one. Copy a string, paste it into Tor Browser, and read the last six characters in the address bar before you type a password.

awazonozc4jwyrveu4473igv5ldt2hnccl2s7lerm2z27cvrc22e4uyd.onion
awazonth6ocz5cyos63czmhtsglqr7ydkdcc4lopux7nxbauoo2qmvyd.onion
awazonvaqbgkhirejon6qnlxcjibrhkqhzh2xb2lclc6t67vxhlvjkyd.onion

NOTHING HERE IS RANKED. THE ORDER IS THE ORDER THEY WERE WRITTEN IN.

Baseline

The onion string opened directly in Tor Browser.

Substitution

The same address opened through a service that appends a suffix and serves the page on the ordinary web.

What moves

A third party is inserted in the middle. It receives your requests, decrypts them, forwards them, and returns the answers, which means it holds everything in cleartext at the moment of relaying.

Does not move

Nothing improves. You reach the same market, more slowly, with an extra party who did not need to exist.

Cost

Your username, your password, your session token, every message and every wallet address, all readable by the operator, plus your real address which the gateway sees directly.

Verdict

Costs more than it moves. There is no version of this that is safe to sign in through.

IWhy the interception is structural

A gateway exists to translate between the ordinary web and an onion service. To do that it has to terminate your connection, read what you sent, make its own connection to the onion, and hand back the response. There is no arrangement in which it can perform that translation without seeing the contents. This is not a matter of the operator being honest. An honest gateway sees exactly as much as a hostile one.

On top of that, you reached the gateway over the normal internet from your own address. It knows where you are, and it knows which onion you asked for. Those two facts together are the pairing that Tor exists to prevent.

IIWho runs them

Some are volunteer projects with plain intentions. Others are set up specifically to harvest the credentials of people who did not want to install a browser. From the outside they are indistinguishable, because both look like a page that loads. The economics are unkind here: a gateway serving a darknet market login form is the cheapest credential collection scheme available, and it does not require the operator to build a convincing clone, because the market builds the page for them.

IIIThe situations where people reach for one

A locked down machine where installing a browser is not possible. If you cannot install Tor Browser, the honest conclusion is that this is not the machine for this.
A phone, where installing feels heavy. Both Android and iOS have real options, and record C4 covers what a phone costs you even when you do it properly.
Curiosity, wanting to see whether an address resolves without committing. That is the only version with no password in it, and even then your provider now has a record of the request.

IVThe variant that is harder to spot

A gateway at least announces itself with an unusual domain. A clone does not: it is a fresh onion showing a copy of the login page, and it is the substitution in record A2. Between the two, the clone takes more accounts, because the gateway leaves a clue in the address bar and the clone leaves one only in the last six characters.

IN ONE LINE

A gateway charges you the contents of your session for the price of not installing a browser. That is a bad exchange rate at any level of convenience.