A .onion domain looks like random string noise: omega7yfgaml44ii4cmrm6a6xyke5uzwmnvdsrxurdrcfihtyhrsadid.onion. That length is not arbitrary. Each character encodes part of the public key that identifies the hidden service inside the mesh.
Why Chrome and Firefox Refuse
If you type that address into Edge or Safari, you see a DNS error immediately. Those browsers ask local servers to translate the name into an IP. Local servers have no record for .onion names. They return NXDOMAIN within milliseconds. The request never touches the internet backbone beyond your ISP's resolver.
Tor changes the destination lookup entirely. Instead of asking an external authority, the client asks the Tor consensus file, which every node maintains. The first relay in your circuit knows where to send the packet next, but none of them know the final endpoint. Seven hops separate you from the site. The exit node sees only encrypted blobs until the last relay decrypts enough to find the hidden service port.
What Tor Browser Adds
Tor Browser bundles a modified version of Firefox compiled specifically for the proxy protocol. It includes a SOCKS5 handler that forces all HTTP requests through the relay chain. It also strips certain headers that could leak your actual location. Without that bundle, even if you installed the Tor daemon separately, your regular browser might still leak metadata via WebRTC or DNS queries that bypass the tunnel.
The result is anonymity at the cost of speed. Page loads take 5 to 15 seconds instead of under one. Some sites fail if JavaScript tries to load resources directly without going through the proxy settings. You must keep everything routed through the bridge or accept partial exposure. There is no middle ground where half your traffic goes direct and half goes through the onion layer.
This architecture makes interception difficult but not impossible. Network observers can measure timing patterns. If they watch both sides long enough, correlation attacks become possible. That risk grows with every minute you stay connected. Disconnecting resets the clock and the statistical profile.