[Retr0id]

How the heck does this work? I thought .onions were essentially a hash of a public key, making finding collisions (or even 1-char near collisions like your example) infeasible. Do both of your example links resolve? If so, how?

I have no doubt that you can find one with similar prefix and/or suffix, but not to the degree of similarity of your example.

[michaelt]

> How the heck does this work?

It doesn't.

But you could use brute force to produce something like https://www.bbcnewsd7xlp77nkq76byazcldy2hlmovfu2egnv7t2rccij... and at least some people will be inattentive enough to fall for it.