Home / Onion Explained / Lookalike attacks
Vanity prefixes: how fake Torzon URLs copy the first characters
The beginning of an address is the easiest part to fake.
Generating lookalikes
Freely available tools try millions of keys until one produces an address with a chosen prefix, such as the first six or seven letters of a real address.
Cost grows fast
Each extra matching character makes the search about 32 times harder, so fakes usually match the start and then diverge.
What to compare
Check the middle and the end of the torzon url as carefully as the beginning. That is where lookalikes give themselves away.
Better still
Compare the full string mechanically, for example by pasting both into a text editor and searching for one inside the other.
Fake Torzon URLs often copy the first characters; always compare the middle and the end too.