@onewithaquestion , @Charlie75014 ,
@Charlie75014 - the following involves Brave Browser and TOR, and it may interest you, re your issue:
https://community.brave.com/t/brave-using-bad-ip-reputation/385910
–
@onewithaquestion
Not malware.
There is some kind of relation established between Brave and TOR, that is technically complicated; one article, as an example:
https://brave.com/new-onion-service/
–
In order to show how a series of website-connecting events, can lead toward getting an Onion link involved via using Brave Browser . . .
I used Brave Browser > New Private Window
and the link to your issue:
https://community.brave.com/t/opening-a-website-then-it-reopens-with-tor/385657
as a starting point.
Next, I scrolled down the window, to “Suggested Topics” and right-clicked on topic:
“How do I transfer data from Opera GX?”
and in the pop-up menu, I chose:
“Open link in New Window”
A New Private Window was displayed, for that topic.
Next, I selected the Brave Search bookmark that I maintain near the top of my list of bookmarks.
The resulting window, shows a “Tor” link-icon of some type, at the right end of the window’s URL address field:
When I clicked on that “Tor” link-icon, a new window opens with an Onion URL address . . . and I know from a firewall report, that some stages of TOR IP addresses, were involved, getting to that Onion web page:
Apparently something of Brave Search, uses Onion (servers).
In other words, YOU can use the Brave Browser TOR feature (New Private Window with Tor) that has technical associations/connections/relations with Onion (that I do not yet understand).
And, in addition, Brave Search (and possibly more of whatever is going on at Brave), is also using Onion.