Not Evil Onion Link, Grams, Phobos: What Happens When a Search Engine Dies
The engines behind the not evil onion link and its peers
Not Evil was for years one of the better-known keyword search engines on Tor, notable for a plain interface and for excluding certain categories of content by policy. Grams was different in kind: it was built to search darknet marketplaces specifically, mimicked the look of a mainstream search engine, and ran for roughly three years before its operator announced its closure in late 2017. Phobos was a smaller keyword engine that gained a following for a period. Rindex, sometimes written Rindexx, appears in older lists as another index. Each of these earned mentions in guides, forum threads and directory pages, and those mentions did not disappear when the services did. That is the first thing to understand about a not evil onion link or any similar phrase: the search demand is driven by old documents, not by current availability. The details of exactly which of these engines is online, offline or intermittently reachable at any moment cannot be stated reliably here, and that uncertainty is the point. If an educational article cannot tell you a service's status without checking, neither can a directory that was last edited years ago. Status has to be determined at the time you need it, from a source that can actually know.
How onion services actually disappear
Clearnet sites leave traces when they die: expired domains, archived pages, parked landing pages. Onion services vanish more completely, and the manner of vanishing matters for what comes next. Some shut down deliberately, with an announcement. The Grams operator posted a closing message. That is the best case, because a signed farewell tells users to stop looking. Some go offline without a word, when an individual operator loses interest or resources, leaving users to guess. Some are seized by law enforcement and replaced with a notice, which is documented in press releases. Some rotate to a new address after an attack or the format migration and fail to reach all their old users. And some fall into the intermittent state where the address works some weeks and not others, which is the most confusing of all because nobody can say whether the service is dead. A scenario: a user's bookmark for a not evil deep web link stops working. They cannot tell whether the engine is gone, moved or temporarily down. They search the clearnet for a new address and find several, all recent, all confident. At least one is a clone built for exactly this moment. Without a signed statement from the operator, the user has no way to choose, and the safest choice is to choose none.
Why a dead engine's phobos onion link is more dangerous than a live one's
A living service defends its name. Its operators publish the current address, sign announcements, warn about clones and can be asked. A dead or dormant service defends nothing, and its name keeps attracting searchers who arrive expecting to find it. Whoever puts up a page at a phobos onion link, or under any other retired name, faces no competition from the original and no correction from anyone. The result is that retired names are among the easiest targets for impersonation. A page can adopt the name, copy the old interface from archived screenshots, populate a search index with scraped data, and appear to be a revived version of the original. Users who remember the engine fondly are inclined to believe it came back. And because the impersonator controls the results, they control where every user goes next. This is a general principle beyond search engines. Any famous onion service that has gone quiet leaves behind a name with value and no owner, and the name will be used. Forums that closed, markets that were seized and tools that were abandoned all generate the same pattern of revival pages. The tell is always the same: a claim of continuity with no signed link to the original operator's key.
The grams onion link and the special case of market search
Grams deserves a separate note because it was not a general search engine. It indexed marketplace listings, and its closure removed a tool whose whole purpose was to make illegal commerce easier to navigate. Searches for a grams onion link today come from two directions: people who read about it in histories of the darknet economy, and people who want a replacement for its function. For the first group, the history is genuinely interesting. Grams demonstrated that the economics of search apply on Tor as anywhere else, that indexing marketplaces was technically possible, and that such a service could attract enough attention to be written about widely before shutting down on its operator's terms. Academic and journalistic accounts of darknet markets discuss it as part of that ecosystem's infrastructure. For the second group, this site has nothing to offer, and it is worth being plain about why. Tools that exist to navigate illegal markets are outside the scope of an educational resource, participation in those markets is illegal almost everywhere, and the pages offering a revived Grams or a successor are, following the principle above, exactly the pages an impersonator would build. A name attached to a closed illegal service is the least trustworthy category of onion link there is.
Determining the real status of a rindex tor link or any quiet service
When you encounter a rindex tor link, a not Evil address or any service you suspect may be dormant, a short procedure establishes what can be established. 1. Look for the operator's accountable channel: a clearnet page, a signing key, an announcement venue with history. If one exists, its most recent statement is your answer, and its silence over a long period is also an answer. 2. Check the Tor Project's documentation and reputable technical writing for any mention of the service's status. Absence proves nothing, but a documented closure settles the question. 3. Look at dates on every page that offers an address. Undated pages and pages that changed only a year in the title are not evidence of anything current. 4. Look for the impersonation pattern: a revived page with the old name, no signed continuity with the original key, and confident claims of being official or the only real link. 5. If nothing confirms the service is alive and operated by the original people, treat every address for it as unverified and do not enter anything on any page that carries the name. A scenario: a researcher writing about the history of onion search wants to know whether a particular engine is still up. They find a closure announcement signed with the operator's long-used key. Their question is answered, and every page offering a fresh address for that engine is now known to be either a mirror of stale data or an impersonation.
Handling the rindexx tor link problem in your own bookmarks
The dead-engine problem also lives in your own browser. A bookmark folder built over years accumulates addresses for services that have since closed, moved or been seized, and each one is a small trap: a click on a rindexx tor link that no longer belongs to its original operator could land you on whatever now sits at that address, or prompt you to search for a replacement in exactly the wrong places. Periodic pruning is worth doing. - Review bookmarks every few months. For each, ask whether you have seen a signed or otherwise accountable statement from the operator recently. - Remove bookmarks for services you have confirmed closed. Keep a note of the closure if the history matters to you. - For services that have gone quiet without explanation, move the bookmark to a separate folder marked unverified rather than deleting it, and do not use it until the operator's channel says something. - Never replace a dead bookmark with an address found through a clearnet search. Wait for the operator, or accept that the service is gone. The habit takes a few minutes and removes a class of risk that grows silently. It also keeps your bookmark list honest: everything in the main folder has a living operator you can point to, and the unverified folder is a reminder of how many services on this network do not last.
Names outlive services, and that is the risk
Not Evil, Grams, Phobos and Rindex are remembered because they were useful or notable, and the memory is what makes them dangerous now. A name that people still search for, attached to a service that no longer defends it, is an open invitation to impersonation, and the impersonators control everything the visitor sees afterwards. The principle extends to every onion service that has gone quiet, and it is the reason status must be checked from the operator's own channel and never inferred from a page that simply uses the name. The habit that protects you is unglamorous: before trusting any address for a service you have not used recently, establish whether the service is alive and who says so. If nobody accountable says so, the address is a rumour, and the friendly old name on the page changes nothing. One step to take today: open your Tor Browser bookmarks and find the oldest one. Try to determine, from the operator's own channel rather than from search results, whether that service is still run by the same people. If you can, good. If you cannot, move it to an unverified folder. You have just practised the one check that a dead engine's name is designed to make you skip.
Frequently asked questions
is not evil search engine still online?
Its status cannot be stated reliably in a static article, and that is the point: check for a current statement from the operators through an accountable channel rather than trusting any page that uses the name. Old guides keep the name in circulation regardless of availability.
what happened to grams?
Grams was a search engine built to index darknet marketplace listings. Its operator announced its closure in late 2017 after roughly three years of operation. Pages offering a revived Grams or a successor lack signed continuity with the original and should be treated as impersonations.
why is a dead onion service more dangerous than a live one?
A living service publishes its address, signs announcements and warns about clones. A dead one defends nothing, so anyone can adopt its name, copy its look and control where visitors go next, with no correction from the original operator.
how do i check whether an onion search engine still exists?
Look for the operator's accountable channel, such as a clearnet page or a long-used PGP key, and read its latest statement. Check reputable technical writing for a documented closure. If nothing confirms the original operators are still running it, treat every address as unverified.
what should i do with old onion bookmarks?
Review them periodically, remove those for confirmed closures, move quiet ones to an unverified folder, and never replace a dead bookmark with an address found through a clearnet search. Wait for the operator's own channel or accept that the service is gone.